# 3.9.9 Sessions

The **Sessions** settings in **ZTrust** allow administrators to configure session durations, idle timeouts, and login limits. These configurations control how long users, clients, and offline sessions remain active or idle before expiration. Proper session management enhances both **security** and **user experience**.

<figure><img src="https://1778922777-files.gitbook.io/~/files/v0/b/gitbook-x-prod.appspot.com/o/spaces%2F3EUK5AUZv0UVaI5S0CTM%2Fuploads%2FZyS4kMCxSRSEHm49mB9O%2F1.png?alt=media&#x26;token=4673f452-372d-45ac-9205-3f884d854be3" alt=""><figcaption><p>Fig 3.9.9.a: Session, Session Management</p></figcaption></figure>

**SSO Session Idle**

* **Description** - The duration of inactivity before an SSO session expires. Tokens and browser sessions are invalidated when the session expires.
* **Default Behavior** - Resets automatically upon authentication or token refresh.
* **Duration Unit** - Minutes / Hours / Days

<figure><img src="https://1778922777-files.gitbook.io/~/files/v0/b/gitbook-x-prod.appspot.com/o/spaces%2F3EUK5AUZv0UVaI5S0CTM%2Fuploads%2F9fjHiqXcBniAVj7QWvrz%2F2.png?alt=media&#x26;token=d18e3aee-cf84-46f7-b051-d203926485f3" alt=""><figcaption><p>Fig 3.9.9.b: Session, SSO Session Idle time</p></figcaption></figure>

#### **SSO Session Max**

* **Description** - The **maximum duration** an SSO session can remain active, regardless of user activity. Once exceeded, both tokens and sessions are invalidated.
* **Default Behavior -** If exceeded, users must re-authenticate.
* **Duration Unit** -  Minutes / Hours / Days&#x20;

<figure><img src="https://1778922777-files.gitbook.io/~/files/v0/b/gitbook-x-prod.appspot.com/o/spaces%2F3EUK5AUZv0UVaI5S0CTM%2Fuploads%2FwHgOk7eIMKKVnniRpzwF%2F3.png?alt=media&#x26;token=b46ef56e-455a-4c46-bf57-45ec509f0243" alt=""><figcaption><p>Fig 3.9.9.c: Session, SSO Session Maximum time and format</p></figcaption></figure>

#### **SSO Session Idle Remember Me**

* **Description -** Defines the idle timeout for **Remember Me** sessions. If unset, the standard **SSO Session Idle** value applies.
* **Default Behavior** - Defaults to **SSO Session Idle** if not configured.
* **Duration Unit** -  Minutes / Hours / Days&#x20;

<figure><img src="https://1778922777-files.gitbook.io/~/files/v0/b/gitbook-x-prod.appspot.com/o/spaces%2F3EUK5AUZv0UVaI5S0CTM%2Fuploads%2FYI59SvLncFrIqZuGmkqN%2F4.png?alt=media&#x26;token=e6831897-8b6b-41b1-ba45-c64aa77bd357" alt=""><figcaption><p>Fig 3.9.9.d: Session, SSO Session Idle remember me</p></figcaption></figure>

#### **SSO Session Max Remember Me**

* **Description -** Sets the **maximum duration** for a **Remember Me** session before expiration.
* **Default Behavior** - Defaults to **SSO Session Max** if not configured.
* **Duration Unit** -  Minutes / Hours / Days&#x20;

<figure><img src="https://1778922777-files.gitbook.io/~/files/v0/b/gitbook-x-prod.appspot.com/o/spaces%2F3EUK5AUZv0UVaI5S0CTM%2Fuploads%2FhMU0SL0eVkLKLkpeVLlu%2F6.png?alt=media&#x26;token=3a1cdf21-b00a-4658-8a2c-50015df5f800" alt=""><figcaption><p>c</p></figcaption></figure>

### **Client Sessions**

Client sessions control how long application-specific sessions remain active.

* **Description** - Duration a **client session** can remain idle before expiration. Tokens are invalidated once expired.
* **Default Behavior** - Defaults to **SSO Session Idle** if not set.
* &#x20;**Duration Unit** -  Minutes / Hours / Days&#x20;

<figure><img src="https://1778922777-files.gitbook.io/~/files/v0/b/gitbook-x-prod.appspot.com/o/spaces%2F3EUK5AUZv0UVaI5S0CTM%2Fuploads%2FOR31HNhDZGfqPZf5xT5v%2F7.png?alt=media&#x26;token=511833c3-119a-4a32-aa54-4cd32d7264eb" alt=""><figcaption><p>Fig 3.9.9.f: Session, Client session idle time format</p></figcaption></figure>

#### **Client Session Max**

* **Description -** Maximum duration a **client session** can remain active, regardless of activity. Tokens are invalidated once expired.
* **Default Behavior** - Defaults to **SSO Session Max** if not set.&#x20;
* **Duration Unit** -  Minutes / Hours / Days&#x20;

<figure><img src="https://1778922777-files.gitbook.io/~/files/v0/b/gitbook-x-prod.appspot.com/o/spaces%2F3EUK5AUZv0UVaI5S0CTM%2Fuploads%2F3H5DUhkm9cvBPQYJJy7O%2F8.png?alt=media&#x26;token=b610639f-f515-4c84-b6e6-cd793929e030" alt=""><figcaption><p>Fig 3.9.9.g: Session, Client session max time format</p></figcaption></figure>

This refers to the maximum duration for which a Client Session remains active before expiration.&#x20;

Tokens are invalidated once the session expires.

If not set, it defaults to the Standard SSO Session Max value.&#x20;

You can adjust the values and select the duration unit from the dropdown menu as required.

<figure><img src="https://1778922777-files.gitbook.io/~/files/v0/b/gitbook-x-prod.appspot.com/o/spaces%2F3EUK5AUZv0UVaI5S0CTM%2Fuploads%2FVhYTmiKQwu27C4SBtmzx%2F9.png?alt=media&#x26;token=5ea6ccab-9f84-4e43-b7e9-c514f88efc9a" alt=""><figcaption><p>Fig 3.9.9.g: Session, Offline session settings</p></figcaption></figure>

#### **Offline Session Idle**

* **Description -** The duration an **offline session** can remain idle before expiration. Offline tokens must be refreshed within this period to maintain validity.
* **Default Behavior** - If not refreshed within the set duration, the session expires.
* **Duration Unit** -  Minutes / Hours / Days&#x20;

<figure><img src="https://1778922777-files.gitbook.io/~/files/v0/b/gitbook-x-prod.appspot.com/o/spaces%2F3EUK5AUZv0UVaI5S0CTM%2Fuploads%2FuY4moP0JgIAqEMm0HWY3%2F10.png?alt=media&#x26;token=e7abea82-e5b6-4a8b-af45-93bd4a9f0a60" alt=""><figcaption><p>Fig 3.9.9.h: Session, Offline session idle</p></figcaption></figure>

#### **Offline Session Max Limited**

* **Description -** A toggle setting:\
  • **ON** → Enables the **Offline Session Max** duration limit.\
  • **OFF** → Offline sessions expire **only** due to inactivity.
* **Default Behavior** -Disabled by default
* **Duration Unit** -  N/A

<figure><img src="https://1778922777-files.gitbook.io/~/files/v0/b/gitbook-x-prod.appspot.com/o/spaces%2F3EUK5AUZv0UVaI5S0CTM%2Fuploads%2FMP60vxLm2fXiJsrFB9vP%2F11.png?alt=media&#x26;token=b0b8053e-5167-4c86-a5b4-94ba4665f004" alt=""><figcaption><p>Fig 3.9.9.i: Session, Offline session settings for maximum time limit</p></figcaption></figure>

#### **Offline Session Max**

* **Description -** The **maximum duration** an offline session remains active, regardless of user activity.
* **Default Behavior** - Requires **Offline Session Max Limited** to be enabled.
* **Duration Unit** - Minutes / Hours / Days

<figure><img src="https://1778922777-files.gitbook.io/~/files/v0/b/gitbook-x-prod.appspot.com/o/spaces%2F3EUK5AUZv0UVaI5S0CTM%2Fuploads%2F8f9L6AIXLwXpwdSBT7vH%2F12.png?alt=media&#x26;token=0f569ab6-9a67-4b7f-8925-6b2520b2b5c1" alt=""><figcaption></figcaption></figure>

You can customize this duration and select the unit (Minutes, Hours, or Days) from the dropdown menu as per your requirements.

<figure><img src="https://1778922777-files.gitbook.io/~/files/v0/b/gitbook-x-prod.appspot.com/o/spaces%2F3EUK5AUZv0UVaI5S0CTM%2Fuploads%2FNgs0sc7cS3XDZOFjO9t8%2F13.png?alt=media&#x26;token=b170dc08-ed10-4b47-b57f-63d722d57ba0" alt=""><figcaption><p>Fig 3.9.9.j: Session, Login settings</p></figcaption></figure>

#### **Login Timeout**

* **Description -** Maximum time allowed for a user to **complete the login process**. If exceeded, users must restart authentication.
* **Default Behavior** - Recommended: **30 minutes**
* **Duration Unit** - Minutes / Hours / Days

<figure><img src="https://1778922777-files.gitbook.io/~/files/v0/b/gitbook-x-prod.appspot.com/o/spaces%2F3EUK5AUZv0UVaI5S0CTM%2Fuploads%2F2xdKYovqGWNfkrQnBZyS%2F14.png?alt=media&#x26;token=4a91adc3-ff73-4cd0-801b-b44e23c23e0e" alt=""><figcaption><p>Fig 3.9.9.k: Session, Login settings timeout</p></figcaption></figure>

#### **Login Action Timeout**

* **Description -** Maximum duration users have to complete **login-related actions**, such as updating passwords or configuring TOTP.
* **Default Behavior** -Recommended: **5 minutes or more**
* **Duration Unit** - Minutes / Hours / Days

<figure><img src="https://1778922777-files.gitbook.io/~/files/v0/b/gitbook-x-prod.appspot.com/o/spaces%2F3EUK5AUZv0UVaI5S0CTM%2Fuploads%2FepDrd1IRdnowGZtmLK4o%2F15.png?alt=media&#x26;token=e0ae9c5d-7f58-4cfa-a42c-bc98d07d71f3" alt=""><figcaption><p>Fig 3.9.9.l: Session, Login action timeout</p></figcaption></figure>

### **Save and Revert**

* **Save** → Click **Save** to apply the updated session configurations.
* **Revert** → Click **Revert** to discard any unsaved changes.

\\
