Configure session management
Prerequisites
Permissions required to perform this action :
Manage web sessions
Configure session management:
A web session refers to an authenticated instance of your Zoho Directory account. To put it simply, a web session is created every time you sign in to your account from a browser or device, and is closed when you sign out. Signing in from your laptop is considered a web session. Signing in from a different browser in the same laptop is considered a separate web session and signing in from a mobile browser is also considered a web session. However, signing in from a native mobile app is not considered a web session.
Unaccounted web sessions can pose serious threats to your security, which is why managing your users' sessions is an essential part of organizational administration.
The major problem posed by unaccounted sessions is that as end users, it's easy to lose track of how many unsafe browsers or devices you're currently signed in from. Let's take a look at an example. Jacalyn is a sales representative at Zylker. Due to the nature of her job, she travels around a lot and often connects to work remotely. She usually uses her laptop to connect, and sometimes her mobile phone. Since those are personal devices, she never signs out of them. On rare occasions, she connects from internet cafes, and out of habit she does not sign out from them either. Now she has three active sessions, one of which is in a public computer, open for anyone to access. Jacalyn has now put her account and her organization at risk.
Zoho Directory's session management enables you to protect your organization from these unaccounted sessions, with these three settings:
- Session Lifetime: This setting automatically signs your users out of a session after the specified number of days. If Zylker's admin sets the session lifetime as 30 days, Jacalyn will be forced to re-authenticate herself every month. She buys a new mobile phone and sells her old one. Even if she forgot to sign out of it, the session will automatically expire in at most a month.
- Idle Session Timeout: This setting automatically signs your users out of a session if they haven't used it in the specified time period. For example, if Zylker's admin set the idle session timeout as one hour, Jacalyn's public computer session will automatically expire an hour after she stops using it, reducing the risk.
- Concurrent Sessions: This setting specifies how many browsers or devices a user can be signed in from at a time. For example, if Zylker's admin set the concurrent sessions as two, Jacalyn would be able to sign in from only two devices at a time. So once she comes back from the public computer and starts using her regular devices, she'll automatically be signed out of the public computer, preventing any security incident.
Note: The configured settings will apply only to the sessions created by a user after the policy is applied to them.
To configure session management:
- Sign in to Zoho Directory
, then click Admin Panel in the left menu.
- Go to Security, click Security Policies, then click on the policy you want to configure.
- Go to Advanced Settings, then set the Session Lifetime, Idle Session Timeout, and Concurrent Sessions.
Note: To manually manage the sessions of individual users,
use the Account Activity tab in their user information page.
Zoho CRM Training Programs
Learn how to use the best tools for sales force automation and better customer engagement from Zoho's implementation specialists.
Zoho DataPrep Personalized Demo
If you'd like a personalized walk-through of our data preparation tool, please request a demo and we'll be happy to show you how to get the best out of Zoho DataPrep.
- Zoho Workerly Home
- Forums
- Connect With Us:
- Zoho Recruit Home
- Forums
- Connect With Us:
You are currently viewing the help pages of Qntrl’s earlier version. Click here to view our latest version—Qntrl 3.0's help articles.
New to Zoho Survey?
Zoho Sheet Resources
Zoho Forms Resources
New to Zoho Sign?
Zoho Sign Resources
Sign, Paperless!
New to Zoho TeamInbox?
Zoho TeamInbox Resources
New to Zoho ZeptoMail?
Zoho DataPrep Resources
Design. Discuss. Deliver.
New to Zoho Workerly?
New to Zoho Recruit?
New to Zoho CRM?
New to Zoho Projects?
New to Zoho Sprints?
New to Zoho Assist?
New to Bigin?
Related Articles
Security policies - Overview
General Info: The Free plan allows only the defaut security policy. The Standard plan allows up to 5 additional security policies. Security policies are a set of customizable rules that govern how your users can authenticate themselves. They consist ...Add security policy
General Info: The Free plan allows only the default security policy. The Standard plan allows up to 5 additional security policies. Prerequisites Permissions required to perform this action : Add security policies Add security policy: Sign in to Zoho ...Configure password policy
Prerequisites Permissions required to perform this action: Manage password policy Configure password policy: Passwords are the most commonly used authentication factor. Many users re-use the same, insecure password for all their online accounts, ...Delete security policy
Prerequisites Permissions required to perform this action : Delete security policy Delete security policy: When a security policy is deleted, the priorities of the remaining policies will be reordered and applied accordingly. Learn more about policy ...Apply an existing security policy to new groups
Prerequisites Permissions required to perform this action : Edit security policies Apply an existing security policy to new groups: When applying a policy to a new group, remember to take the policies already applied to the group into account. When a ...
New to Zoho LandingPage?
Zoho LandingPage Resources