Session management includes idle timeout, absolute session duration, concurrent session limits, and termination on credential change or administrative action. It prevents indefinite access from an unattended or abandoned session.
Configuration balances security against user friction.
Alternative Names:
Session Controls, Session Security
Why it Matters?
Session timeout is the control users resist most and that matters in shared and mobile environments, where an unattended session on a courthouse computer or a lost device remains authenticated. The other significant function is immediate termination on deprovisioning, since a system that ends sessions only at expiry leaves a departed employee logged in until the session times out naturally.
Frequently Confused with
Related terms
Frequently asked questions
Why does session timeout matter?
What happens on deprovisioning?
