id_token_lifetime_secs can be set to more than 24 hours

[nulllogicone]

I wanted to increase the lifetime of an id_token to be valid for 3 days and when I upload the policy the error message of B2C says that "the value should be between 5min and 10080 min (7 days) and the refresh token lifetime should be greater than ID token lifetime".

Is the maximum value in the documentation correct or is it possible to use higher values?

---

Document Details

⚠ Do not edit this section. It is required for learn.microsoft.com ➟ GitHub issue linking.

• ID: 79614f7a-1783-2aaf-1d91-e13d9f37766a
• Version Independent ID: a2697558-3e38-8001-37ae-d9852628da25
• Content: Configure tokens - Azure Active Directory B2C
• Content Source: articles/active-directory-b2c/configure-tokens.md
• Service: active-directory
• Sub-service: b2c
• GitHub Login: @kengaderdus
• Microsoft Alias: kengaderdus

[AjayBathini-MSFT]

@nulllogicone Thanks for your feedback! We will investigate and update as appropriate.

[YashikaTyagii]

@nulllogicone We have been following up with the PG team regarding your question and will confirm you soon. Thanks for being patient.

[YashikaTyagii]

@nulllogicone can you help with this case?

[nulllogicone]

I would be happy to help, what can I do? To be more precise about the issue: It is about this sentence in the documentation

id_token_lifetime_secs - ID token lifetimes (seconds). The default is 3,600 (1 hour). The minimum is 300 (5 minutes). The maximum is 86,400 (24 hours).

But I use a higher value and it seems to work so the documentation should be updated to the correct value

[MarileeTurscak-MSFT]

@nulllogicone to confirm, what do you have yours set to?

[nulllogicone]

I have those settings and seems to work

<Item Key="id_token_lifetime_secs">259200</Item>
<Item Key="token_lifetime_secs">86400</Item>
<Item Key="refresh_token_lifetime_secs">259200</Item>

[kengaderdus]

@nulllogicone

We apologize for the delay in our response. We're working to update our documentation. For now, we'll close this issue, then track it internally #please-close.