Manage Token Policies
Configure the lifetime of API authentication tokens in IAM → Security → Token Policies.
Settings
| Field | Description | Default | Range |
|---|---|---|---|
| Access Token Lifespan | Access token validity period | 10 min | 5 – 15 min |
| Refresh Token Lifespan | Refresh token validity period | 7 days | 1 – 30 days |
How to Configure
- Go to Token Policies → General policy tab.
- Enter integer values within the valid range for each field. Input fields perform real-time validation.
- Click Save.
| Button | Behavior |
|---|---|
| Reset to default | Reset all settings to system defaults (not applied until saved) |
| Reload | Revert unsaved changes to previously saved values |
| Save | Save current policies (enabled when changes exist) |
Token & Session Policy Relationship
- Access Token Lifespan < Session Idle Timeout — prevents tokens from outliving sessions
- Refresh Token Lifespan > Session Max Lifespan — prevents UI disconnection from refresh tokens expiring before sessions