Conjur API token keeps expiring too quickly even after setting TTL

[Rovmenpaul]

Hi everyone,

I’m integrating Conjur into a CI/CD pipeline and using the API to fetch secrets. Even though I’ve set the CONJUR_AUTHN_TOKEN_TIMEOUT to extend the token TTL, it still seems to expire after just a few minutes.

I’m authenticating via the host factory and storing the token temporarily, but it’s forcing re-authentication more frequently than expected, which is interrupting longer-running builds.

Is there a known limitation or override I might be missing? Or does the TTL setting need to be configured somewhere else in the policy or environment?

Thanks in advance!

[szh (Shlomo Heigh)]

Where are you setting CONJUR_AUTHN_TOKEN_TIMEOUT? The TTL for Conjur authn tokens is not configurable, except when using OIDC authentication. See OIDC Authenticator for Conjur UI and Conjur CLI authentication