---
title: Setting an SSO token lifetime
description: Identity-federation standards require a window of time during which a SSO token is considered valid. Each SSO token has an issuance time-stamp element and elements indicating the allowable lifetime of the SSO token before and after the issuance time stamp.
component: pingfederate
version: 13.1
page_id: pingfederate:administrators_reference_guide:help_spbrowserssotasklet_configassertionlifetimestate
canonical_url: https://docs.pingidentity.com/pingfederate/13.1/administrators_reference_guide/help_spbrowserssotasklet_configassertionlifetimestate.html
llms_txt: https://docs.pingidentity.com/pingfederate/llms.txt
docs_for_agents: https://developer.pingidentity.com/build-with-ai/docs-for-agents.md
revdate: July 5, 2022
section_ids:
  before-you-begin: Before you begin
  about-this-task: About this task
  steps: Steps
---

# Setting an SSO token lifetime

Identity-federation standards require a window of time during which a SSO token is considered valid. Each SSO token has an issuance time-stamp element and elements indicating the allowable lifetime of the SSO token before and after the issuance time stamp.

## Before you begin

For previous steps in configuring Browser SSO, see [Choosing SAML 2.0 profiles](help_spbrowserssotasklet_selectsamlprofilesstate.html). For more information about managing service provider (SP) connections, see [Accessing SP connections](help_spconnectionstasklet_connmgmtstate.html).

## About this task

PingFederate gives you the option to change the valid lifetime of the single sign-on (SSO) token.

## Steps

1. (Optional) Override the default values for the following fields.

   | Field              | Description                                                                                   |
   | ------------------ | --------------------------------------------------------------------------------------------- |
   | **Minutes Before** | The amount of time before the SSO token was issued during which it is to be considered valid. |
   | **Minutes After**  | The amount of time after the SSO token was issued during which it is to be considered valid.  |

   The default value is 5 minutes for both fields.

2. Click **Next** to save your changes.