Sessions are issued by our identity provider and expire after 30 days of inactivity.