Grant duration (access period override)
Users are assigned a default "grant period" (in minutes), either within Knocknoc for local users, or passed as a SAML attribute through "sessionDuration".
These can be overridden per-Knoc, allowing certain access oaths to have shorter periods if so desired. For example, the default user-level period could be 8 hours (480 minutes), whereas access to a specific environment could be limited to 60 minutes.
These can be configured per-Knoc, as shown below.
If during the users session their IP address changes, the expiry date/time will be retained - meaning their session is not extended should the IP address change.