Hi @Ajay Gour
Thank you for posting this in Microsoft Q&A.
Unfortunately, it is not possible to set the token session limit to three months. The refresh token can only be set to a duration of three months (90 days). However, single-page applications that utilize the authorization code flow with PKCE are subject to a refresh token lifetime of 24 hours, whereas mobile applications, desktop applications, and web applications do not face this restriction.
Session durations can be set for a maximum of one day and a minimum of five minutes. Documentation is correct.
The error message indicates a duration of more than one day. I will notify my team about this, and we will work on displaying the correct error message. Thank you for bringing this to our attention.
For your reference: https://learn.microsoft.com/en-us/azure/active-directory-b2c/configure-tokens?pivots=b2c-user-flow#token-lifetime-behavior
Hope this helps. Do let us know if you any further queries.
Thanks,
Navya.
If this answers your query, do click Accept Answer
and Yes
for was this answer helpful. And, if you have any further query do let us know.