Notify-Me SSO

​@THMOBR Where did you encounter this token expiration message? If there are any logs available, please share them. It will help us provide a more accurate response.

Hi 

We go in a case like a year ago, where the customer had changed to SSO, where it did not work on iOS, but did work on Android. I also saw another case the other day, which also said that it was working on Android but not iOS, that I after discussing with 2nd line sent to them for further investigations.

But in this case, I can see thata it doesn’t work on Android either. Just want to get that confirmed. 

Regards

Johan

Hi Joolse,

This describes exactly the situation we're facing. On iOS, we get the message below, while on Android, the token is constantly expiring.

Could you assist us in resolving this issue? At the moment, the most urgent situation is on Android, as the majority of our users are using it.

Thank you in advance for your support!

Best regards,
Thiago Morais

​@THMOBR can you elaborate on what you mean with “the token is constantly expiring” please? what behaviour do you see and what error message(s) do you get?

Best regards,

Rukmal

Hi Rukmal,

So far, I haven't identified any errors in the log. The only message that appears is "Login EXPIRED," and my technician informed me that it is related to the TOKEN.

Currently, we have someone from the infrastructure team checking if the issue could be linked to Microsoft 365. I found this link, and we are analyzing if it might help in any way: Configurable Token Lifetimes.

However, we still lack a clear direction. Our directors are the primary users of Notify Me, and this issue has been causing significant stress, especially with the upcoming year-end holidays, a time when this resource is heavily used.

In summary, we don't know where the problem lies and need help or guidance to understand what needs to be analyzed or adjusted. We cannot determine whether the issue is with a configuration in Notify Me or the Microsoft SSO.

 

Best regards,
Thiago Morais

​@THMOBR how long does the session typically last until the status shows as EXPIRED?

If the session expires in a matter of minutes to at most say 2 hours, I think the token lifetime configuration on Microsoft is a good start, but note that token renewal only happens when the app is being actively used, so the app being idle overnight for example, could lead to session expiry. While understanding that this requires re-authentication (hint: long press to refresh credentials), the purpose of such token expiry is to ensure that especially on mobile devices tokens cannot be intercepted and used by an attacker, therefore please approach token lifetimes with great care.

Best regards,

Rukmal