The session should outlive it. Check whether "OIDC: verify session on every request" is switched on in your settings — with it on, an expired access token ends the session. Turn it off, or ask your provider for refresh tokens and tick "Request offline access": oidc_verify_session: false oidc_request…
Jump to postWe connected our identity provider over OpenID Connect. Sign-in works, but everyone is signed out after exactly 60 minutes, which matches our provider's access-token lifetime.
Is Threadwell supposed to refresh the token, or is the session meant to outlive it?
The session should outlive it. Check whether "OIDC: verify session on every request" is switched on in your settings — with it on, an expired access token ends the session.
Turn it off, or ask your provider for refresh tokens and tick "Request offline access":
oidc_verify_session: false
oidc_request_offline_access: trueIt was the verify setting. Turned off and people stay signed in. Thank you!