Can anyone suggest on how can we enable refresh token rotation and grace period settings in ISC??
These are 2 different items from a SailPoint perspective , can you provide more detail around your use case?
1 Like
Refresh tokens are only applicable to OAuth tokens with the Authorization Code grant type. PATs and client credentials don’t benefit from refresh tokens. When you create a new OAuth token in the security settings, you will select Authorization Code and Refresh Token. The only option you have to configure refresh token is how long the refresh token will be valid before requiring the user to login again. The shortest time is 1 month expiration, and the longest is two years expiration.
1 Like
This topic was automatically closed 60 days after the last reply. New replies are no longer allowed.