MB-R174
There is an absolute maximum session lifetime such that re-authentication is enforced according to risk analysis and documented security decisions.