diff --git a/apps/settings/serializers/auth/sso.py b/apps/settings/serializers/auth/sso.py
index 38481cf2a..c04f38920 100644
--- a/apps/settings/serializers/auth/sso.py
+++ b/apps/settings/serializers/auth/sso.py
@@ -13,5 +13,6 @@ class SSOSettingSerializer(serializers.Serializer):
         help_text=_("Other service can using SSO token login to JumpServer without password")
     )
     AUTH_SSO_AUTHKEY_TTL = serializers.IntegerField(
-        required=False, label=_('SSO auth key TTL'), help_text=_("Unit: second")
+        required=False, label=_('SSO auth key TTL'), help_text=_("Unit: second"),
+        min_value=1, max_value=60*30
     )