Increase Access token lifetime to 12 hours using a custom policy

Praveena Uppalapati [ELB] 51

We're trying to configure access token expiry time to 12 hours using below powershell cmdlets, but it's not getting enforced on application.

New-AzureADPolicy -Definition @('{"TokenLifetimePolicy":{"Version":1,"AccessTokenLifetime":"12:00:00"}}') -DisplayName $policyName -IsOrganizationDefault $false -Type "TokenLifetimePolicy"

$app = Get-AzureADApplication -Filter "DisplayName eq '$applicationName'"

Add-AzureADApplicationPolicy -Id $app.ObjectId -RefObjectId $policy.Id

Need help in configuring access token expiry time to 12 hrs for an app in Azure AD (Default is 1 hr).

Marilee Turscak-MSFT 33,801 Reputation points Microsoft Employee

2021-10-20T19:44:29.323+00:00

What happens when you set the policy? Do you have any conditional access policies or default policies that could be overwriting this?

You can try the troubleshooting steps in this article as well. https://learn.microsoft.com/en-us/azure/active-directory/develop/configure-token-lifetimes
Praveena Uppalapati [ELB] 51 Reputation points

2021-11-26T06:50:15.38+00:00

We are having only one policy we are verifying the policy whether it is applied or not using the Get -AzureADPolicyAppliedObject command. Given the screenshot for the same.