New REST API - Authentication Settings API for managing session policies
The Authentication Settings API allows tenant administrators to programmatically manage authentication and session policies for their Qlik Cloud tenant.
Session policy management
Tenant administrators can now retrieve and update authentication settings that control user session behavior:
- Session inactivity timeout: Configure the duration of inactivity before a user session automatically expires
- Maximum session lifespan: Set the maximum allowed duration for a user session, regardless of activity
These settings apply tenant-wide and help enforce security policies around session management.
API operations
The API supports the following operations:
GET /api/core/auth-settings: Retrieve the tenant’s current authentication settings, including configured values and defaultsPATCH /api/core/auth-settings: Update authentication settings using JSON Patch (RFC 6902) operations
The API requires the TenantAdmin role.
For more information, see the reference documentation for the Authentication Settings API.