3.6 Configuring Session Timeout
After you complete your tasks, you can sign out of your application. However, sometimes you might get automatically signed out due to session timeouts.
Let us understand how session timeouts work. When you sign in using your credentials, you're authenticated to use the application, and a session is established. During this session, you don't need to re-authenticate. But, for security purposes, your session is configured to be active for a predefined duration, which is called the session timeout period. Your sessions can expire due to various reasons such as leaving your application idle for a period longer than the timeout period. In such cases, you're automatically signed out of the application. Your timeout periods may vary on certain pages. For example, you may observe a longer timeout period on pages that automatically refresh or UIs that open in separate windows or tabs.
This table lists the various types of session timeouts you may experience. After the specified duration, your session expires, and you need to sign in again to continue your work.
Timeout Type | Description | Configurable | Timeout Duration |
---|---|---|---|
Session Lifetime Timeout |
After you are authenticated in the application, if you are actively working on it, your session remains active for a predefined duration, referred to as the session lifetime timeout period. Your session ends after this period, even if you're using the application. |
Yes | 8 Hours (Default value) |
Inactive Session Timeout | This type of timeout considers the duration you leave your application idle/inactive. After this duration, System automatically terminates the session, and you are signed out of the session. | No | 60 Minutes |
Browser Inactivity Timeout | This type of timeout considers the duration you leave your browser idle. After this duration, your session is terminated by the System, which automatically | No | 60 Minutes |