Skip to main content

Grant duration

Users are assigned a default "grant period" (in minutes), either within Knocknoc for local users, or passed as a SAML attribute through "sessionDuration". 

These can be overridden per-Knoc, allowing certain access paths to have shorter periods if so desired. For example, the default user-level period could be 8 hours (480 minutes), whereas access to a specific environment could be limited to 60 minutes.

These can be configured per-Knoc, as shown below.

Override maximum grant duration in the Knoc Grant optionsOverride maximum grant duration in the Knoc Grant options

If during the user's session their IP address changes, the expiry date/time will be retained, meaning their session is not extended should the IP address change.

Back to top