Hi descopers. Can someone tell me what is StepUp Token Timeout? I’m using the authentication, yet it ask me to re-authenticate everey few minutes .. not sure the two are related

Hi, default timeout is 10 minutes, you can change this in the project settings page in Descope console.

But what does it do? Also can this contribute to the fact that I’m asked to re authenticate every few minutes? (I didn’t change any default properties)

This is the timeout for the step-up JWT, so by default the token is valid for 10 minutes, and after 10 minutes need to re-authenticate, so yes, it might be that, try to increase this value. You can read more about step-up here: https://docs.descope.com/manage/stepup Can you share a bit about your implementation and use case? You have both regular authentication flow and a step-up flow? They should not affect each other, besides that fact that to run a setup login you must be authenticated.

I should have only google auth.

If you don’t need a step-up flow you can just use a sign-up/sign-in/sign-up-or-in flows, which the session token JWT is valid for a much longer time. (4 weeks by default.). step-up is only for use cases that you want to have another authentication layer on top of the regular authentication. (for payments, etc.)