Allow auto refreshing of Entra ID Token

We are currently integrated with Entra ID, using it as our Security Token Service (STS) and identity provider.

Issue:

• The access token times out after 1 hour, triggering a 30-second timeout warning pop-up.

• If the user is away during this window, the session expires, and all form content is lost, leading to significant productivity loss.

• The pop-up itself warns about this issue and offers a chance to perform the login manually, but this serves no purpoes if the user is not at the screen.

Proposed Solution:

• Enable SmartForms to automatically refresh the token in the background to prevent session expiration.

• This would ensure that users do not lose their unsaved form data due to an expiring session.

• Many modern platforms, such as Workday, Salesforce and SharePoint Online, handle this seamlessly.

• At the minimum, the form should not force a re-fresh immediately but rather check for token validity automatically and indicate it in the form to force the user to take action to preserve the form.

Rationale:

• The productivity loss from lost form data outweighs the security risks of keeping a user logged in.

• This should at least be made available as an option for organizations that prioritize usability.

Request:

• Introduce a built-in SmartForms feature for silent token refresh.

• Ensure that form data is retained even if a session timeout occurs.

• If security is a concern, make this feature configurable so organizations can enable or disable it based on their policies.