Login / Auto-logout

[rhusted]

Brethren, is is possible to add a feature so that members can stay logged into their Gospel Library account for longer periods of time?

I understand the necessity of the auto-logout for the Member Directory and other tools with sensitive content. But I must say that logging in/out every 30 minutes while I'm trying to create a talk, having online discussions, etc. is very frustrating.

Is it possible to have an IDP setup where we have TWO IDs: one for sensitive content and one for non-sensitive content (like my scriptural notes - which I use ALL THE TIME)? BOTH would reset on login, but the more sensitive ID would expire in 30 minutes? The other would expire in a day or something like that (or 2 weeks like some websites).

This is possible to do, TECHNICALLY, and it's something that we really SHOULD do in order to decrease the frustration for members who use our MARVELOUS Gospel Library.

Using OAuth 2.0 / OpenID Connect
The IdP issues:
Access Token → expires in 30 minutes
Refresh Token → expires in 24 hours

When the user logs in again, you can configure the IdP to:
Invalidate all previous tokens
Issue new ones with fresh expiration times

Most IdPs (Okta, Auth0, Azure AD, Keycloak) support this pattern natively.

Using SAML 2.0
You can control AssertionLifetime (short-lived, e.g., 30 min)
The session cookie or IdP session index can persist for 24 hours

Logging in again invalidates both assertion and session

SAMPLE YAML
access_token:
expires_in: 1800 # 30 minutes
refresh_token:
expires_in: 86400 # 24 hours
on_login:
revoke_existing_tokens: true

This would be a HUGE blessing to members who use our Gospel Library to prepare talks, lessons, research the scriptures, add notes and links, etc. I can't possibly tell you how frustrating it is to write up a whole note in the Gospel Library and then when I go to SAVE my work, I'm told that I've been logged out. I've lost a LOT of inspired content as a result of this issue. I'd be SUPER grateful if you could implement a dual-authentication structure like the one defined above.

Robert Husted
rhusted@gmail.com

[BrianEdwards]

Brethren, is is possible to add a feature so that members can.....

Robert, for your awareness the Tech Forum primarily serves as a location for user-to-user discussion and self-help, and is not connected to the Church support services. Posting an issue like yours here in the Forum, can be helpful if there are other members who can suggest workarounds or solutions you may not have tried yet.

To make a request that gets to the Church support team, please use the Feedback functionality that is available inside Gospel Library (Help->Send Feedback). Additionally, you can submit Feedback for any Church tech issue using any of the Church apps, or using the Feedback link available at the bottom of most Church webpages. To make things easier, when submitting Feedback you can point to this Forum discussion thread for reference (so you don't have to replicate everything there).

[russellhltn]

Are you referring to the application, or the web page? You posted in the application section, but I've never been logged out of the app.

Getting logged out of the web page is pretty common. The key is to remain active by requesting information from the server. I'm not sure how practical it is to have a different log out policy on the same domain.