[SSO Session Length] Allow For Longer Sessions
- Dominant language
- Python
- Stars
- 44.8k
- Forks
- 4.9k
- Avg merge
- 1d 5h
- Merged PRs (30d)
- 624
Description
### Problem Statement
Daily users of Sentry that are members of organizations that have SSO configured are prompted to authenticate frequently, [we cover this in our docs:](https://docs.sentry.io/product/accounts/sso/#security)
>For individual organizations with single sign-on, we expire organization access after one day (20 hours).
We have received feedback from a number of individuals that this duration is too short. [Take this thread for example](https://twitter.com/JustJake/status/1613348687048224769?s=20&t=cWVZzhf9DbMZJfQjIIFqUQ), or more specifically this feedback about our service:
>[@getsentry](https://twitter.com/getsentry) thoughts on fixing the fact that I'm signed out every single day?
>[...] we use SAML with all our services and Sentry is the only one that kicks off. You can verify that the user is still valid through the issued access/refresh token without having such a short-lived session.
For Sentry maintainers: this issue is also linked to an internal ticket that tracks various Zendesk tickets where configurable session duration for organizations with SSO has been requested.
### Solution Brainstorm
In the [past some solutions have been put forward](https://twitter.com/jorilallo/status/1534268639683264514?s=20&t=h76B2RF35iUObjlSzN4cCA):
>Actually we use GSuite auth. This is pretty annoying and in Linear we poll the API once in a while to kick off if offboarded. Much better than constantly getting kicked out
Internally we discussed:
- Possibly extending the session duration to 7 days
- An organization level toggle for configuring session duration
This [value is also configurable in self-hosted Sentry](https://github.com/getsentry/self-hosted/issues/1513) which has prompted some users to request this change in our SaaS offering.
We also discussed other services such as GitHub which require frequent authentication, and looking more broadly about feedback around both their service and ours.
┆Issue is synchronized with this [Jira Improvement](https://getsentry.atlassian.net/browse/FEEDBACK-1711) by [Unito](https://www.unito.io)
Contributor guide
Assessment
This issue has not been assessed yet.