Search code examples
azureazure-active-directoryopenvpnazure-vpn

Azure Point to Site - AAD Authentication


I have set up a point to site connection from a VNET to a Windows system. Using Azure VPN Client with AD authentication to establish the connection. How long is the AD token valid after login and is there a way to change it?


Solution

  • As far as I know, the lifetime of an access token based on Azure AD authentication is about 1 hour, the token will expire after 1 hour.

    If you want to customize the lifetime of the token (increase or decrease), you need to use powershell to create a token lifetime policy, and then assign the policy to the service principal to set the token lifetime.