Difference between "Client Session" and "SSO Session" in timeout settings?

pmellati · August 10, 2020, 2:29am

Hi,

We are trying to configure our session timeouts for various clients. However, we are not sure what is meant by “Client Session” and “SSO Session” in the “Realm Settings → Tokens” settings page:

The tooltip descriptions are a bit vague, and all we can see in the code is that, when calculating the expiry of an access token, the minimum of the two settings is taken:

github.com

keycloak/keycloak/blob/main/services/src/main/java/org/keycloak/protocol/oidc/TokenManager.java#L820


      
              claims.put("nickname", userInfo.getNickName());
          }
          if (userInfo.getPreferredUsername() != null) {
              claims.put("preferred_username", userInfo.getPreferredUsername());
          }
          if (userInfo.getProfile() != null) {
              claims.put("profile", userInfo.getProfile());
          }
          if (userInfo.getPicture() != null) {
              claims.put("picture", userInfo.getPicture());
          }
          if (userInfo.getWebsite() != null) {
              claims.put("website", userInfo.getWebsite());
          }
          if (userInfo.getEmail() != null) {
              claims.put("email", userInfo.getEmail());
          }
          if (userInfo.getEmailVerified() != null) {
              claims.put("email_verified", userInfo.getEmailVerified());
          }
          if (userInfo.getGender() != null) {

So, what is meant by “SSO Session”, and how is it different from a “Client Session”? Does it have to do with the browser or cookies somehow?

pmellati · August 13, 2020, 6:03am

Answering my-self:

SSO Session is about the browser cookie, whereas the client session is in regards to refresh tokens.

jsebasrv · April 4, 2022, 2:09pm

Hello @pmellati, I have several clients and I want to extend browser session time for an specific client. I tried to change anvaced options inside client configuration but doesn´t work. Do you have any advise?

Topic		Replies	Views
Client Session Idle vs SSO Session Idle Configuring the server oidc	1	3997	February 6, 2021
Configuring different session times across clients Getting advice	0	847	March 31, 2021
Different SSO timeout for different clients Configuring the server admin-console	0	403	August 15, 2022
Different SSO timeouts per user Getting advice oidc	4	42	January 9, 2025
SSO Session Idle vs SSO Session Max Getting advice	8	13805	September 17, 2024

Difference between "Client Session" and "SSO Session" in timeout settings?

Related topics