Regardless how the UAA server is configured the BOSH CLI will ask 2 min refresh-token-validity: 86400 # re-login required once a day secret: "" # CLI expects .