The leeway time setting allows for small discrepancies in seconds between a token, received from Microsoft, becoming valid or expiring. Without this extra time accouting for some system clock skew, authentication tokens may be deemed invalid.

Duration until a session expires and the user is forced to re-authenticate with Microsoft.