diff --git a/hosts/architect/openid.nix b/hosts/architect/openid.nix
index b1762c7..551dc07 100644
--- a/hosts/architect/openid.nix
+++ b/hosts/architect/openid.nix
@@ -13,7 +13,9 @@
           redirect_uri = "/redirect_uri",
           keepalive = "yes",
           accept_none_alg = true,
-          revoke_tokens_on_logout = true
+          revoke_tokens_on_logout = true,
+          -- access token valid for a day
+          access_token_expires_in = 86400
       }
 
       -- call introspect for OAuth 2.0 Bearer Access Token validation