How do I add a rule for single sign-on (SSO) expiration

A policy for single sign-on can help you control a temporary duration for SSO before the user must re-authenticate or enforce multi-factor authentication (MFA) for all logins.

NOTE: The SSO rule applies globally to all users/customers within your Evo Environment. SSO rule is specific for SAML Webapps.(Does not apply to Evo Credential Provider). Only 1 SSO rule is allowed per environment.

1. From the dashboard, click Policies. 2. Click New+ on top right. 3. Click Single Sign-On (SSO) Reset Frequency. 4. Use the slider to define the rule. 1.To Always Require MFA. Move the slider all the way to the left. 2.To expire SSO after a period. Move the slider based on your organizations’ rules. Anywhere between 1 to 7 days.

5. Click Save.

It is recommended that if the SAML capable web application allows you to configure a session timeout. You match it to the policy defined within your Evo Portal.