Session Management

Topics

Session Configuration

Session Policies:

  • Idle Timeout: 15-120 minutes (default: 30 minutes)

  • Absolute Timeout: 8-24 hours (default: 8 hours)

  • Concurrent Sessions: 1-5 per user (default: 3)

  • IP Binding: Optional restriction to specific networks

Session Security:

  • Automatic logout on browser closure

  • Session token rotation every 30 minutes

  • Suspicious activity detection and termination

  • Geographic location monitoring (if enabled)

Active Session Monitoring

View Active Sessions: Navigate to Session Management → Active Sessions

Information displayed:

  • Username and role

  • Login timestamp and duration

  • IP address and user agent

  • Last activity time

  • Geographic location (if available)

Session Controls:

  • Terminate individual sessions

  • Force logout all sessions for specific user

  • Send session warning messages

  • View detailed session history

Session Troubleshooting

Common Issues:

Users randomly logged out:

  • Check session timeout settings

  • Verify load balancer sticky sessions

  • Review session security policies

Session not terminating:

  • Check concurrent session limits

  • Verify IP binding restrictions

  • Review session cleanup logs