Skip to main content

Grant duration (access period override)

Users are assigned a default "grant period" (in minutes), either within Knocknoc for local users, or passed as a SAML attribute through "sessionDuration". 

These can be overridden per-Knoc, allowing certain access oaths to have shorter periods if so desired. For example, the default user-level period could be 8 hours (480 minutes), whereas access to a specific environment could be limited to 60 minutes.

These can be configured per-Knoc, as shown below.

Screenshot 2025-06-09 at 15.22.50.png

If during the users session their IP address changes, the expiry date/time will be retained - meaning their session is not extended should the IP address change.