Hi everyone. I'm working on tightening up our access controls and need to enforce a 4-hour max session for all our admin consoles (AWS, Grafana, Kubernetes dashboard, etc.).
I found some good docs for individual services, but I'm looking for a more centralized approach. Has anyone implemented this at the identity provider level? We're using Okta, and I'm trying to see if a global session policy can apply to all SAML apps.
For example, in our Grafana config, I have this:
```ini
[auth]
login_maximum_inactive_lifetime_duration = 4h
login_maximum_lifetime_duration = 4h
```
But setting this for every single tool feels messy. Is there a best practice here? Maybe something with session tokens in the IdP? Appreciate any tips from those who've done this before.