Skip to content

Commit b00c063

Browse files
authored
docs: Update caveats about HCP and TTL (#5637)
1 parent 4304ec0 commit b00c063

File tree

2 files changed

+1
-6
lines changed

2 files changed

+1
-6
lines changed

website/content/docs/concepts/iam.mdx

Lines changed: 1 addition & 4 deletions
Original file line numberDiff line numberDiff line change
@@ -54,14 +54,11 @@ With the [OIDC](/boundary/tutorials/identity-management/oidc-auth) and LDAP auth
5454
as the auth method. The accounts and users are only created once the user authenticates to Boundary for the first time.
5555
The same applies to OIDC/LDAP [managed groups](/boundary/tutorials/identity-management/oidc-idp-groups).
5656

57-
<Note>
58-
5957
You can configure the `max_age` in the [OIDC attributes](/boundary/docs/concepts/domain-model/auth-methods#oidc-auth-method-attributes) to indicate to the OIDC provider how much time is allowed to pass until a user is challenged to authenticate again.
6058
However, the user will not be prompted to authenticate until the controller's `auth_token_time_to_live` [parameter](/boundary/docs/configuration/controller#auth_token_time_to_live) has expired.
6159
The default value is 7 days.
62-
At this time, HCP Boundary users cannot configure the `auth_token_time_to_live` for a controller, so that value always equals the default of 7 days.
6360

64-
</Note>
61+
To configure time to live in HCP Boundary, refer to [Configure authentication time to live](/hcp/docs/boundary/configure-ttl).
6562

6663
### Grant permissions
6764
When setting up access controls for a user, it is important to first consider which scope(s) the user needs access to. Roles give users permission to perform actions through grants strings.

website/content/docs/configuration/controller.mdx

Lines changed: 0 additions & 2 deletions
Original file line numberDiff line numberDiff line change
@@ -88,8 +88,6 @@ description will be read.
8888
to all tokens from all auth methods). Valid time units are anything specified by Golang's
8989
[ParseDuration()](https://golang.org/pkg/time/#ParseDuration) method. Default is 7 days.
9090

91-
Note that you cannot set a maximum time to live for auth tokens in HCP Boundary at this time. For HCP Boundary, all auth tokens' maximum time to live equal the default of 7 days.
92-
9391
- `auth_token_time_to_stale` - Maximum time of inactivity for all auth tokens globally (pertains
9492
to all tokens from all auth methods). Valid time units are anything specified by Golang's
9593
[ParseDuration()](https://golang.org/pkg/time/#ParseDuration) method. Default is 1 day.

0 commit comments

Comments
 (0)