[DidYouKnow-42] Why your apps need Short Session Timeout
Keeping your applications secure and data protected is a growing concern in today’s era. Security compliance is of the utmost importance across all organizations and failure to do the same might lead to data loss and business risk.
As an enterprise organization that is particular about compliance and security, you might want to ensure the security of your data by implementing a strict session inactivity timeout limit.
Also, the Session timeout plays a significant role in managing the system resources well. Each active session consumes memory, the more you expand timeouts, the more chance you have of people leaving open sessions, which means the server is wasting resources (memory) saving the session data for longer times. This may cause a loss of performance.
Therefore, if you reduce the session time-out, you may improve performance if the session uses a large quantity of memory, and a significant number of sessions are active.
As an admin of your ServiceDesk, you can set a threshold, beyond which, if any session within the application is inactive, then the same will be automatically logged out. Follow the below steps to set the session timeout in your ServiceDesk.
Login to your ServiceDesk Plus, navigate to Admin > General settings > Security settings > General
Click Settings from the top right dropdown of your account. Scroll down to the Session Timeout Configuration section.
Set the inactivity time limit for your application. Any session, that stays beyond this set threshold, will get automatically logged out of the network.
Note: While setting up the inactivity time limit ensure to maintain a balance between usability and security so that your team members can comfortably carry out their activities within the application, without their sessions frequently expiring. We recommend setting 30 mins. as the threshold value.
You might find this article interesting to know the importance of session timeout.
This enhancement has been released with the build 11125, we request you to upgrade your ServiceDesk Plus to the current build and make it more secure.
Check our previous article to know about Glowroot tool that is bundled with ServiceDesk Plus.