[Feature] Offline_Access token 2fa keycloak

[suse-coder]

Is your feature request related to a problem? Please describe.
How is it possible to have long lived access with 2fa for element chat, so that the user does not have to relogin for a year with his 2fa when he does not change his device and the time is below one year.

Describe the solution you'd like
In keycloak i dont want to change the active_session token to 1 year, but there exist a offline_access scope which could work. Is this currently supported by mas?

[sandhose]

I don't think I understand what you want. Once you logged in, the access you got from the MAS side has nothing to so with the token from Keycloak, it has its own lifecycle, and MAS will not contact keycloak after the initial login

[suse-coder]

As I now know one can also for the client just make the session_idle and session_max in keycloak longer, so all fine