Hello,
Can you give me your sogo's onpenid config?
Have you set SOGoOpenIdTokenCheckInterval to a specific value?
Do you know what is the lifespan of the access_token?

Hey,

//  SOGoAuthenticationType = openid;
//  SOGoOpenIdConfigUrl = "https://sso.example.com/realms/example/.well-known/openid-configuration";
//  SOGoOpenIdClient = sogo;
//  SOGoOpenIdClientSecret = supersecret;
//  SOGoOpenIdScope = "openid profile email";
//  SOGoOpenIdEmailParam = email;
//  SOGoOpenIdLogoutEnabled = YES;
//  SOGoXSRFValidationEnabled = NO;

We don't set SOGoOpenIdTokenSetInterval to any value, we use whatever is the default.

Our access token lifespan is currently set to 6 hours.

image.png (27,119 bytes)   

image.png (27,119 bytes)   

Could you try to set
SOGoOpenIdTokenSetInterval = 60;
Its default value is 0meaning each request made to the backend, sogo will check the validity of the token (meaning request to the openid server). And sogo can make a lot of request to show a page.
This param tell sogo the number of second it can wait to revalidate a token to avoid all this openid requests. Maybe it will fix the latency.

Oh, doh. I wasn't aware the interval's default was zero facepalm. After setting it to 60, things are apparently holding up, in the staging server. Thanks for the pointer, I think we can close this for now!