Remember Me checkbox not working — users logged out after one hour despite being checked
-
We are experiencing an issue where the "Remember Me" checkbox on the FusionAuth login page does not work as expected. Users are consistently logged out after approximately one hour, regardless of whether they check the "Remember Me" option.
Environment:
- Using the standard OAuth redirect flow for authentication
- Tested on the latest FusionAuth version with the default login template
- Users are often logged into multiple applications simultaneously
Observed behavior:
- After about one hour, users receive the message "You have been logged out" on the FusionAuth login screen
- This happens even when the Remember Me checkbox is selected during login
- User sessions are visible in FusionAuth (though these appear to be primarily for the refresh token flow)
- No logs in FusionAuth indicate why the user was logged out
What we've tried:
- Verified the issue occurs with the unmodified default FusionAuth template
- Confirmed users have active sessions showing in their profile
Is there a configuration setting or known issue that would cause FusionAuth to expire user sessions after one hour regardless of the Remember Me selection? How can we keep users logged in for longer periods when they've opted to be remembered?
-
The behavior you're experiencing is likely related to the SSO Session Timeout setting in your Tenant configuration.
Understanding the "Remember Me" Checkbox
The "Remember Me" checkbox (labeled "Keep me signed in" in the default theme) controls the FusionAuth SSO session. When checked, it creates a persistent cookie that allows users to remain logged in across browser sessions. However, even with this option checked, the session will still expire based on your configured Session Timeout value.
Check Your SSO Session Timeout
Navigate to:
- Tenants → (your tenant) → OAuth tab
- Look for the Session timeout setting
- The default value is 3600 seconds (1 hour)
This setting controls how long the FusionAuth SSO session remains valid. When this duration expires, users are logged out and must re-authenticate, even if they previously selected "Remember Me."
The one-hour expiration you're seeing matches the default Session Timeout setting, which explains why users are consistently logged out after that time period.
To Resolve This Issue
- Increase the Session timeout value to a longer period (e.g., 86400 seconds for 24 hours, 2592000 seconds for 30 days, or whatever suits your security requirements)
- Save the Tenant configuration
- Have users log in again with "Remember Me" checked
The new timeout will apply to all new SSO sessions created after the configuration change.
Related Documentation
-
D dan has marked this topic as solved