MaxAge

Maximum Authentication Age: the allowable elapsed time in seconds since the End-User was last actively
authenticated. If the elapsed time is greater than this value, the End-User is actively re-authenticated
before the request continues, and 0 requires it on every request.

A completed re-authentication satisfies the requirement, however long the End-User took over it. The
auth_time Claim of the ID token reports when the authentication took place.