>Is it possible to set the values of > idp.authn.defaultLifetime > idp.authn.defaultTimeout > via script? No, but you can attach a reuseCondition predicate to any login flow that does a real time determination of reuse policy for its results to effectively achieve that outcome. -- Scott