Hi,
We're using the OIDC Forge component with AWS Cognito on O11.
Right now the application logs users out within about 5 minutes, even though the token expiry in AWS Cognito is set to 60 minutes.
We want the session to last 30 or 60 minutes, and then the user should have to log in again.
Where should we set this? In Cognito's token expiry, in the OIDC site properties (PurgeSessionsOlderThanXInMinutes / SecondsBeforeTokenExpires), or somewhere in OutSystems? And what could be causing the logout after 5 minutes?
Thanks!
Hi Sathish,
Those two OIDC site properties aren't what's controlling your login duration:
- SecondsBeforeTokenExpires is likely just a buffer before the OIDC token's real expiry (not clearly documented, so take this with a grain of salt).
- PurgeSessionsOlderThanXInMinutes only drives the housekeeping timer that cleans up old session records from the component's own tables — it doesn't enforce logout.
The 5-minute cutoff you're seeing is almost certainly OutSystems' own platform session timeout, which is independent of the Cognito/OIDC token expiry. It defaults to 20 minutes but can be set lower in your environment. Check Service Center > Factory Configuration (or machine.config if on-prem) and bump it to 30/60 minutes there: https://success.outsystems.com/documentation/11/building_apps/data_management/sessions_in_traditional_web_apps/
If you're behind a reverse proxy/load balancer, also worth checking its idle timeout — that's another common source of an unexpectedly short cutoff.