Requiring reauthentication for new and expired sessions for an OpenID Connect SSO authentication service

To add an extra layer of security, you configure Pega Platform to reauthenticate new sessions and to reauthenticate when reactivating an expired session. The time-out period is specified on the operator's access group or is managed by the application server or another external facility.

1. Open the service from the navigation panel in Dev Studio by clicking Records > SysAdmin > Authentication Service and choosing a service from the instance list.
2. On the OpenID Connect tab, expand the Advanced configuration settings section and the Processing subsection.
3. Select the Use access group timeout checkbox to use the authentication time-out values that are specified in the user access group. This setting determines how long user sessions can remain inactive before users are prompted to identify themselves again. Clear the Use access group timeout checkbox if the time-out is managed by the application server or another external facility.
4. Click Save.

What to do next:  Configuring operator provisioning for an OpenID Connect SSO authentication service