# Session timeout with SSO

**URL:** <https://meta.discourse.org/t/session-timeout-with-sso/110211>\
**Category:** Bug\
**Created:** [February 27, 2019, 6:55am UTC](https://meta.discourse.org/t/session-timeout-with-sso/110211 "2019-02-27T06:55:53Z")\
**Posts on this page:** 1\
**Showing post:** 4

<div class="post-metadata">

**Author:** ![david](https://sea3.discourse-cdn.com/meta/user_avatar/meta.discourse.org/david/32/157490_2.png) [@david](https://meta.discourse.org/u/david)\
**Post date:** [April 15, 2019, 3:45pm UTC](https://meta.discourse.org/t/session-timeout-with-sso/110211/4 "2019-04-15T15:45:57Z")

</div>

I followed the steps @sam listed, and got the popup error:

 ![40](https://global.discourse-cdn.com/meta/original/3X/e/c/ec96f85e2500f8d9b1cd220991d79612ecdcf64b.png)

But I did manage to reproduce the OP. The error very specifically happens when the auth tokens **expire** on the server. If you delete the cookies on the client, it works fine. Recategorizing this to #Contribute > Bug

To repro easily, set session length 1 hour, and log in via SSO. Fake the expiring tokens using:

```plaintext
time = 2.hours.ago
UserAuthToken.update_all(rotated_at: time, created_at: time, updated_at: time, seen_at: time)

```

---

_[View the full topic](https://meta.discourse.org/t/session-timeout-with-sso/110211)._