This stage attaches a currently pending user to the current session.
It can be used after
user_write during an enrollment flow, or after a
password stage during an authentication flow.
By default, the authentik session expires when you close your browser (seconds=0).
Different browsers handle session cookies differently, and might not remove them even when the browser is closed. See here for more info.
You can set the session to expire after any duration using the syntax of
hours=1,minutes=2,seconds=3. The following keys are allowed:
All values accept floating-point values.
Stay signed in offset
When this is set to a higher value than the default seconds=0, a prompt is shown, allowing the users to choose if their session should be extended or not. The same syntax as for Session duration applies.
Terminate other sessions
When enabled, previous sessions of the user logging in will be revoked. This has no affect on OAuth refresh tokens.