Reply to thread

I have the same question, with curiosity.

In what use case are you mandating 2FA, or users are wanting it and activating it, but that the 30 day timeout is too onerous?  The whole point of 2FA is security, and if you or users are wanting security, then anything beyond 30 days arguably becomes quite risky.