Feature Request: allow shorter periods for Duo approval frequency

Hello, 1Password team,

I would like to make a feature request related to the Duo integration. Administrators have the ability to set how often users must re-authenticate with Duo to sign in to 1Password.

Currently, this field only supports setting the number of days required between requests. It would be nice to be able to set a number of hours instead.


The primary use-case I see for this is organizations who currently have this set to 1 day. This can be frustrating for users because the 24-hour timer will shift forward each day.

For example, say the following occurs:

  • I initially log in on Monday at 9:30 AM and reauthenticate with Duo
  • I can lock and unlock 1Password multiple times that day while working, without needing to use Duo
  • The next day, I logged in at 9:15 AM, so no Duo is required
  • I walk away from my computer to get coffee at 11 AM, locking the computer and 1Password
  • I return to my desk at 11:15 AM, and get prompted for Duo

This cycle continues the whole week, slowly pushing the Duo authentication timer back each day. Often, I don't get the prompt until I am in the middle of working on something or try to use an SSH key.

If we could set this to a shorter value, say 18 hours, then I would still get prompted for Duo re-authentication once a day, but it would effectively guarantee that it would be the first thing I do each day. This would work much better with my routine and make the additional security of Duo much less of a bother.


I hope you will consider this feature and use case in a future release.

Kind Regards,
Ben


1Password Version: Not Provided
Extension Version: Not Provided
OS Version: Not Provided
Browser: Not Provided

Comments

  • @BenJetson

    Thank you for that very well written and easy to understand suggestion. I've shared this verbatim with the products team for review and consideration.

    ref: PB-43755525