Session (stay signed in)
SCADA desks should not bounce to login every few minutes. Access tokens renew quietly; this sets how long the refresh session lasts (1–30 days). Default is 7 days. Operators must sign in again after this period, or after revoke-all.