> **Building with AI coding agents?** If you're using an AI coding agent, install the official Scalekit plugin. It gives your agent full awareness of the Scalekit API — reducing hallucinations and enabling faster, more accurate code generation.
>
> - **Claude Code**: `/plugin marketplace add scalekit-inc/claude-code-authstack` then `/plugin install <auth-type>@scalekit-auth-stack`
> - **GitHub Copilot CLI**: `copilot plugin marketplace add scalekit-inc/github-copilot-authstack` then `copilot plugin install <auth-type>@scalekit-auth-stack`
> - **Codex**: run the bash installer, restart, then open Plugin Directory and enable `<auth-type>`
> - **Skills CLI** (Windsurf, Cline, 40+ agents): `npx skills add scalekit-inc/skills --list` then `--skill <skill-name>`
>
> `<auth-type>` / `<skill-name>`: `agentkit`, `full-stack-auth`, `mcp-auth`, `modular-sso`, `modular-scim` — [Full setup guide](https://docs.scalekit.com/dev-kit/build-with-ai/)

---

# Organization session policy

Override application-level session timeouts for specific organizations with custom absolute and idle session policies
By default, all organizations inherit the session policy configured at the application level — covering absolute session duration and idle timeout. When an enterprise customer requires stricter or different session controls than your application defaults, you can set a custom session policy on a per-organization basis.

Scalekit always enforces the **stricter of the two** (application vs. organization) at session creation time, so organization policies can only tighten — not relax — your application-level defaults.

## Prerequisites

Organization-level session policies are controlled by the `session_policy` feature flag. Enable it on the organization before applying a custom policy.

  ### Node.js

```javascript
await scalekit.organization.updateOrganizationSettings('org_12345', {
  features: [{ name: 'session_policy', enabled: true }],
});
```

  ### Python

```python
scalekit_client.organization.update_organization_settings(
    organization_id='org_12345',
    settings=[{'name': 'session_policy', 'enabled': True}],
)
```

  ### Go

```go
_, err := scalekitClient.Organization().UpdateOrganizationSettings(ctx, "org_12345",
    scalekit.OrganizationSettings{
        Features: []scalekit.Feature{
            {Name: "session_policy", Enabled: true},
        },
    },
)
if err != nil {
    log.Fatal(err)
}
```

  ### Java

```java

scalekitClient.organizations().updateOrganizationSettings(
    "org_12345",
    List.of(OrganizationSettingsFeature.newBuilder()
        .setName("session_policy")
        .setEnabled(true)
        .build())
);
```

## Session policy fields

| Field | Description |
|---|---|
| `policySource` | `APPLICATION` (inherit defaults) or `CUSTOM` (use per-org values) |
| `absoluteSessionTimeout` | Maximum session lifetime regardless of activity |
| `absoluteSessionTimeoutUnit` | Unit for absolute timeout: `MINUTES`, `HOURS`, or `DAYS` |
| `idleSessionTimeoutEnabled` | Whether idle timeout is active for this organization |
| `idleSessionTimeout` | Time after which an idle session expires |
| `idleSessionTimeoutUnit` | Unit for idle timeout: `MINUTES`, `HOURS`, or `DAYS` |

> note: Stricter-wins logic
>
> When both application-level and organization-level policies are active, Scalekit applies the lower value for absolute timeout and idle timeout independently. Setting `policySource: APPLICATION` discards any previously stored custom values.

## Get the current session policy

Retrieve the active session policy for an organization to display it in your settings UI or audit the current configuration.

  ### Node.js

```javascript
const policy = await scalekit.organization.getOrganizationSessionPolicy('org_12345');

// policySource: 1 = APPLICATION (inheriting defaults), 2 = CUSTOM (org-specific values active)
console.log('Policy source:', policy.policySource);
console.log('Absolute timeout (minutes):', policy.absoluteSessionTimeout);
console.log('Idle timeout enabled:', policy.idleSessionTimeoutEnabled);
```

  ### Python

```python
from scalekit.v1.organizations.organizations_pb2 import SessionPolicyType

response, _ = scalekit_client.organization.get_organization_session_policy('org_12345')
policy = response.policy

if policy.policy_source == SessionPolicyType.CUSTOM:
    print('Absolute timeout (minutes):', policy.absolute_session_timeout.value)
    print('Idle timeout enabled:', policy.idle_session_timeout_enabled.value)
```

  ### Go

```go
policy, err := scalekitClient.Organization().GetOrganizationSessionPolicy(ctx, "org_12345")
if err != nil {
    log.Fatal(err)
}

if policy.PolicySource == scalekit.SessionPolicySourceCustom {
    fmt.Println("Absolute timeout (minutes):", policy.AbsoluteSessionTimeout.GetValue())
    fmt.Println("Idle timeout enabled:", policy.IdleSessionTimeoutEnabled.GetValue())
}
```

  ### Java

```java

OrganizationSessionPolicySettings policy =
    scalekitClient.organizations().getOrganizationSessionPolicy("org_12345");

if (policy.getPolicySource() == SessionPolicyType.CUSTOM) {
    System.out.println("Absolute timeout (minutes): " + policy.getAbsoluteSessionTimeout().getValue());
    System.out.println("Idle timeout enabled: " + policy.getIdleSessionTimeoutEnabled().getValue());
}
```

## Set a custom session policy

Apply a custom policy when an organization requires different session durations than your application defaults.

  ### Node.js

```javascript
const updated = await scalekit.organization.updateOrganizationSessionPolicy('org_12345', {
  policySource: 'CUSTOM',
  absoluteSessionTimeout: 480,
  absoluteSessionTimeoutUnit: 'MINUTES',
  idleSessionTimeoutEnabled: true,
  idleSessionTimeout: 60,
  idleSessionTimeoutUnit: 'MINUTES',
});

console.log('Policy updated:', updated.policySource);
```

  ### Python

```python
from scalekit.v1.organizations.organizations_pb2 import SessionPolicyType
from scalekit.v1.commons.commons_pb2 import TimeUnit

response, _ = scalekit_client.organization.update_organization_session_policy(
    organization_id='org_12345',
    policy_source=SessionPolicyType.CUSTOM,
    absolute_session_timeout=480,
    absolute_session_timeout_unit=TimeUnit.MINUTES,
    idle_session_timeout_enabled=True,
    idle_session_timeout=60,
    idle_session_timeout_unit=TimeUnit.MINUTES,
)

print('Policy updated:', response.policy.policy_source)
```

  ### Go

```go
timeout := int32(480)
idleTimeout := int32(60)
idleEnabled := true

updated, err := scalekitClient.Organization().UpdateOrganizationSessionPolicy(ctx, "org_12345", scalekit.OrganizationSessionPolicy{
    PolicySource:               scalekit.SessionPolicySourceCustom,
    AbsoluteSessionTimeout:     &timeout,
    AbsoluteSessionTimeoutUnit: scalekit.TimeUnitMinutes,
    IdleSessionTimeoutEnabled:  &idleEnabled,
    IdleSessionTimeout:         &idleTimeout,
    IdleSessionTimeoutUnit:     scalekit.TimeUnitMinutes,
})
if err != nil {
    log.Fatal(err)
}

fmt.Println("Policy updated:", updated.PolicySource)
```

  ### Java

```java

OrganizationSessionPolicySettings policy = OrganizationSessionPolicySettings.newBuilder()
    .setPolicySource(SessionPolicyType.CUSTOM)
    .setAbsoluteSessionTimeout(Int32Value.of(480))
    .setAbsoluteSessionTimeoutUnit(TimeUnit.MINUTES)
    .setIdleSessionTimeoutEnabled(BoolValue.of(true))
    .setIdleSessionTimeout(Int32Value.of(60))
    .setIdleSessionTimeoutUnit(TimeUnit.MINUTES)
    .build();

OrganizationSessionPolicySettings updated =
    scalekitClient.organizations().updateOrganizationSessionPolicy("org_12345", policy);

System.out.println("Policy updated: " + updated.getPolicySource());
```

## Revert to application defaults

Remove a custom policy and restore the organization to the application-level session settings.

  ### Node.js

```javascript
await scalekit.organization.updateOrganizationSessionPolicy('org_12345', {
  policySource: 'APPLICATION',
});
```

  ### Python

```python
from scalekit.v1.organizations.organizations_pb2 import SessionPolicyType

scalekit_client.organization.update_organization_session_policy(
    organization_id='org_12345',
    policy_source=SessionPolicyType.APPLICATION,
)
```

  ### Go

```go
_, err := scalekitClient.Organization().UpdateOrganizationSessionPolicy(ctx, "org_12345", scalekit.OrganizationSessionPolicy{
    PolicySource: scalekit.SessionPolicySourceApplication,
})
if err != nil {
    log.Fatal(err)
}
```

  ### Java

```java

OrganizationSessionPolicySettings policy = OrganizationSessionPolicySettings.newBuilder()
    .setPolicySource(SessionPolicyType.APPLICATION)
    .build();

scalekitClient.organizations().updateOrganizationSessionPolicy("org_12345", policy);
```


---

## More Scalekit documentation

| Resource | What it contains | When to use it |
|----------|-----------------|----------------|
| [/llms.txt](/llms.txt) | Structured index with routing hints per product area | Start here — find which documentation set covers your topic before loading full content |
| [/llms-full.txt](/llms-full.txt) | Complete documentation for all Scalekit products in one file | Use when you need exhaustive context across multiple products or when the topic spans several areas |
| [sitemap-0.xml](https://docs.scalekit.com/sitemap-0.xml) | Full URL list of every documentation page | Use to discover specific page URLs you can fetch for targeted, page-level answers |