ad-auth/user-activity-window
The TLS Mode to use for talking to the AD Server
DRP caches User objects and password hashes. This value changes the caching behavior for these credentials.
This parameters specifies how long a user should be idle (not having logged in with a password) before being removed (in seconds). The default is 259200 seconds (or 30 days).
The minimum must be one day (86400 seconds).