When logging in, the provider should know how long the user should remain logged in for before being automatically logged out.