add: default user session expiration (coder#950)

ericpaulsen · Katie Horne · web-flow · commit 8c858a53ee9a · 2022-04-18T12:28:44.000-05:00
* add: default user session expiration

* update admin/access-control/index.md

Co-authored-by: Katie Horne &lt;katie@coder.com&gt;

Co-authored-by: Katie Horne &lt;katie@coder.com&gt;
diff --git a/admin/access-control/index.md b/admin/access-control/index.md
@@ -14,11 +14,17 @@ to manually create users who log in with their email address and temporary
 password. Coder will ask them to change their password after they log in the
 first time.
 
+The default user session expiry time is one week for users logging in via built-in
+authentication. This is non-configurable.
+
 ## OIDC authentication
 
 The OpenID Connect (OIDC) authentication option allows you to defer identity
 management to the OIDC provider of your choice (e.g., Google).
 
+The default user session expiry time for OIDC logins is determined by the
+upstream identity provider.
+
 ## Managing authentication to Coder
 
 To manage the ways that users can login to Coder, see
