When the app authenticates via an IdP (Identity Provider) for a custom API with auth0 as the service provider, the access token expiration is ultimately not based on the the token expiration set in the IdP; it’s based on the custom API token expiration settings.