How to set maximumAuthenticationLifetime in SAML SSO config

I am using pac4j with apache shiro for my application . I want to know what is the maximumAuthenticationLifetime value which we needs to set? If I set it to more time like "31536000" seconds(365 days) then will it open potential security issues. If someone is able to intercept the security token, they could use it for 365 days? So what is the best possible way to set the maximumAuthenticationLifetime.