GitHub Community
GitHub SSO Re-Authentication Timeout #50334
Replies: 1 comment 6 replies
|
The default timeout for GitHub SSO authentication tokens is six hours. This means that after six hours of inactivity, you will be prompted to re-authenticate. However, GitHub does provide a way to adjust the session timeout. This can be done by the organization owner or administrator in the organization's SAML settings. Here's how:
Keep in mind that a longer session duration can increase the risk of unauthorized access if your device is lost or stolen, so it's important to balance convenience with security when adjusting this setting. |
|
To locate the "Session duration" setting for your Enterprise plan, try this: In the Security & analysis menu, click on "Authentication." If you're still unable to locate this setting, you may want to consider waiting for others to respond, as they could potentially provide additional insights or a better solution. |
|
@rnhurt It would be greatly appreciated and it will also help other users who might be looking for a solution to a similar issue. |
|
@Anmol-Baranwal I'm sorry, but I still can't find the menus you are describing. My "Code security & analysis" section doesn't have a "Authentication" item to click on or select. And I still can't find a "Session duration" section anywhere in any of my preferences. 🤷
|
|
Ah, no worries. Maybe the source of my information is wrong. Let others answer this for a satisfactory response. |
Uh oh!
There was an error while loading. Please reload this page.
Select Topic Area
Question
Body
We recently started using SSO to authenticate to GitHub and everything seems to be working fine. The one thing that is bothering me is the re-authentication timeout. I'm not sure how long the "session" is supposed to last but it feels like I'm re-authenticating multiple times per day.
It's not a huge problem, but it is a bit jarring when the browser refreshes while your trying to update an Issue or modify your Project. Most other systems don't really re-auth that often so I'm not really sure why GitHub is so needy. Hell, before we moved to SSO I didn't re-auth at all unless I had to do something "risky" (create a PAT, delete a repo, etc.) Why does SSO require so much re-authentication?
Questions
All reactions