Configuring session timeout and limit

You can specify session timeout settings to control when a user is automatically logged out of the Developer Portal. You can also restrict the number of sessions a single user has available to them.

Before you begin

You must have administrator access to the Developer Portal to complete this task.
Note: This module will only synchronize the credentials of applications created by consumers in the Developer Portal site UI. It cannot synchronize the credentials for applications created by the provider in the API Manager UI.

Procedure

  1. If the administrator dashboard is not displayed, click Manage to display it.
  2. To manage the automated logout settings, complete the following steps:
    1. Click Configuration in the administrator dashboard.
    2. In the PEOPLE section, click Automated logout settings.
      Note: You must check Enforce auto logout on admin pages for autologout to apply when navigating the admin areas of the site.screenshot of Enforce auto logout on admin pages checkbox
    3. Use the session timeout configuration options provided as required. For example, you can complete the following tasks:
      • Specify the length of inactivity time, in seconds, before a user is automatically logged out.
      • Specify session timeout values for individual user roles.
        Note: The default session timeout is 30 minutes.
      • Provide a redirection URL at logout.
      • Provide session expiry message texts.
    4. Click Save configuration to save your changes.
  3. To restrict the number of sessions available to a user, complete the following steps:
    1. Click Configuration in the administrator dashboard.
    2. In the PEOPLE section, click Session limit.
    3. Specify the default maximum number of sessions for a user by entering the number into the Default maximum number of active sessions field.
    4. Select the required action from the When the session limit is exceeded options.
    5. From the Logged out message severity list, select the severity of the message that the user receives when they are logged out.
    6. Optionally, in the ROLE LIMITS section, specify separate session limits for each role.
    7. Click Save configuration to save your changes.