Increase DUO timeouts for idle and Active sessions

Yes, it is possible to change the timeout. However any configuration that utilizes a non-default timeout setting is officially unsupported.

To change the maximum session duration, use the Registry Editor (regedit.exe) with administrator privileges to create or update the following registry value in HKEY_LOCAL_MACHINE\SOFTWARE\Duo Security\DuoTsg:
 
Registry Value Type Description
AuthorizedSession_MaxDuration DWORD Set to time in minutes.
e.g. 600 for 10 hours. 

Additionally, idle timeouts may also be modified.

To change the maximum session duration, use the Registry Editor (regedit.exe) with administrator privileges to create or update the following registry value in HKEY_LOCAL_MACHINE\SOFTWARE\Duo Security\DuoTsg:
 
Registry Value Type Description
AuthorizedSession_IdleTimeout DWORD Set to time in minutes.
e.g. 180 for 3 hours.

 

Any registry setting to alter the default timeout behavior may result in unexpected behavior.


.