diff --git a/reference/configuration/framework.rst b/reference/configuration/framework.rst
index 0921fe9ac2e..72c4b1b94f7 100644
--- a/reference/configuration/framework.rst
+++ b/reference/configuration/framework.rst
@@ -1874,6 +1874,10 @@ session IDs are harder to guess.
 
 If not set, ``php.ini``'s `session.sid_length`_ directive will be relied on.
 
+.. deprecated:: 7.2
+
+    The ``sid_length`` option was deprecated in Symfony 7.2.
+
 sid_bits_per_character
 ......................
 
@@ -1886,6 +1890,10 @@ most environments.
 
 If not set, ``php.ini``'s `session.sid_bits_per_character`_ directive will be relied on.
 
+.. deprecated:: 7.2
+
+    The ``sid_bits_per_character`` option was deprecated in Symfony 7.2.
+
 save_path
 .........
 
diff --git a/session.rst b/session.rst
index 29d1ba364d1..77aea3bba00 100644
--- a/session.rst
+++ b/session.rst
@@ -400,6 +400,11 @@ Check out the Symfony config reference to learn more about the other available
     ``session.auto_start = 1`` This directive should be turned off in
     ``php.ini``, in the web server directives or in ``.htaccess``.
 
+.. deprecated:: 7.2
+
+    The ``sid_length`` and ``sid_bits_per_character`` options were deprecated
+    in Symfony 7.2 and will be ignored in Symfony 8.0.
+
 The session cookie is also available in :ref:`the Response object <component-http-foundation-response>`.
 This is useful to get that cookie in the CLI context or when using PHP runners
 like Roadrunner or Swoole.