diff --git a/apps/base/kanidm/service.yaml b/apps/base/kanidm/service.yaml
index 8de5884..3467ef8 100644
--- a/apps/base/kanidm/service.yaml
+++ b/apps/base/kanidm/service.yaml
@@ -9,6 +9,10 @@ metadata:
     app.kubernetes.io/instance: kanidm
 spec:
   type: ClusterIP
+  sessionAffinity: ClientIP
+  sessionAffinityConfig:
+    clientIP:
+      timeoutSeconds: 10800
   ports:
     - name: https
       port: 8443