Embed token maximum timeout

[Anonymous]

I am trying to set the maximum timeout for embed token using C#, can someone tell me if it possible to change it from default 1 hour?

[v-jiascu-msft · Accepted solution]

Hi @Anonymous,

Yes, you can. You need to configure it in the Azure. Please refer to active-directory-configurable-token-lifetimes#example-manage-an-organizations-default-policy. I tried it like below successfully.

New-AzureADPolicy -Definition @('{"TokenLifetimePolicy":{"Version":1,"AccessTokenLifetime":"02:00:00","MaxAgeSessionSingleFactor":"02:00:00","MaxInac
tiveTime":"30.00:00:00","MaxAgeMultiFactor":"until-revoked","MaxAgeSingleFactor":"180.00:00:00"}}') -DisplayName "WebApiDefaultPolicyScenario" -IsOrganizationDefault $true -
Type "TokenLifetimePolicy"

Best Regards,
Dale