OIDC OP 3.4 and issueIdTokenViaRefreshToken

Cantor, Scott cantor.2 at osu.edu
Tue Aug 1 12:54:55 UTC 2023


> One question: if I'm overriding things (access token lifetime, ID token
> lifetime, refresh token chain lifetime) for the OIDC SSO profile, do I also
> need to override those for the oauth token profile?

I don't know exactly under what conditions it needs that, I would hope that they would only need to be in one place but that place is not likely to be the front channel profile.

-- Scott




More information about the users mailing list