Our team ran into an issue this week where we found a gap between our SSO service and the OIDC module implementation within our Mendix application.
To be precise, our SSO service is time out the authentication process after 10-15 minutes where as the OIDC module is hardcoded to have an authentication attempt only valid for 5 minutes (handleAuthorizationCode flow triggered within the webCallback microflow).
Unfortunately, in our situation, changing the overall SSO settings, is not feasible as it would impact other apps.
Making a code change to a marketplace module, is also not something we would entertain as we could potentially loose the changes if and when we upgrade the module with a newer version.
Having time out settings and any other settings configurable from the admin screen or from constants would make it easier to sync Mendix apps to the SSO service configuration.