Challenge expiry

Challenge expiry

Each verification challenge has an expiry time. If the user does not complete verification before that time, the challenge becomes expired and the verification link is no longer valid.

Default behavior

• Without a tenant override, Challenge uses the default duration of 15 minutes.
• With a tenant override, your organization’s setting applies instead of that default for new challenges.
• Expiry applies to challenges created for your tenant through Slack, webhook / API, MCP, and other flows that create a challenge record.

Configure custom expiry (admin)

1. Log in to the Challenge admin console at challenge.veraproof.io.
2. Open Integrations.
3. Find the Challenge expiry section (between Identity Provider (IdP) and Support contact information).
4. Enter Expiry (minutes) and click Save challenge expiry.

To revert to the server default, clear the minutes field, save again, and Challenge removes the tenant-specific override.

Limits

• Configurable range: 1 to 10080 minutes (up to 7 days).
• Values outside that range cannot be saved.

Related

• Dashboard & Metrics — challenge status Expired and reporting
• Support Configuration — support contacts on error pages
• Webhook Integration — expires_at in API responses reflects the effective expiry window