Configurable Token Lifetime Policies

Configurable token lifetime policies are now generally available in Microsoft Entra ID. This feature allows administrators to customize the lifetimes of access tokens, ID tokens, and SAML tokens issued by the Microsoft identity platform by creating and assigning token lifetime policies to applications and service principals.

Affected: Microsoft Entra ID, Authentications (Logins)

Related changes

• Enforce Conditional Access policies like MFA on every PIM activation · Policies
• Microsoft Entra Kerberos key rotation improved reliability for incoming trust referral flows · Microsoft Entra ID
• Expanded policy storage for passkeys (FIDO2) in Microsoft Entra ID · Microsoft Entra ID
• Microsoft Entra Certificate-based authentication (CBA) support on iOS and CBA as second factor · Microsoft Entra ID
• Entra CBA as third option in system-preferred MFA methods · Microsoft Entra ID
• Entra CBA Certificate Authority (CA) scoping · Microsoft Entra ID

View at Microsoft → Copy summary