Allow {{.Appname}} to:

• See my {{.IDPName}} username and signup date.
• See my email address.
• See my access groups and permissions.
• Keep this access for 15 minutes.
• Maintain this access indefinitely (or until manually revoked).