Single sign-on, sessions and 2FA

What happens if our SSO or IDP is down?

We recommend setting up an admin user with access via password, just in case SSO ever goes down.

Can 2FA be enabled for the Workvivo mobile app?

Yes. When the password authentication method is enabled, Workvivo can enable 2FA on their side — no actions are required from you.

Can we increase the character limit for passwords?

Yes. This applies to both internal password users and external users. Request the change with support.

How does session timeout behaviour work?

Workvivo’s session timeout operates independently of — but interacts with — SSO sessions:

• The Workvivo web session timeout is configurable, with a default of 24 hours and a maximum of 30 days.
• Workvivo uses a persistent cookie with sliding expiration, so the timeout resets on user activity (for example, back to 24 hours on each interaction).
• If there is an active Workvivo session in the browser, the user is granted access directly and no SAML authentication request is sent to the IDP.
• If there is no active Workvivo session, a SAML authentication request is sent. If the user has an active SSO session with the IDP, access is granted without a further prompt; if not, the user must authenticate against the IDP.