1. Session Lifetime: This setting automatically signs your users out of a session after the specified number of days. If Zylker's admin set the session lifetime as 30 days, Jacalyn will be forced to re-authenticate herself every month. If she buys a new mobile phone and sells her old one without signing out of it, the session will automatically expire in at most a month.
   
2. Idle Session Timeout: This setting automatically signs your users out of a session if they haven't used it in the specified time period. For example, if Zylker's admin set the idle session timeout as one hour, Jacalyn's public computer session will automatically expire an hour after she stops using it, reducing the risk.
   
3. Concurrent Sessions: This setting specifies how many browsers or devices a user can be signed in from at a time. For example, if Zylker's admin set the concurrent session as two, Jacalyn would be able to sign in from only two devices at a time. Once she comes back from the public computer and starts using her regular devices, she'll automatically be signed out of the public computer, preventing any security incidents.
   

The configured settings will apply only to the sessions created by a user after the policy is applied to them.

Prerequisites

1. Organization Owner
   
2. Organization Admin
   

iOS

Open the Zoho One Admin app on your mobile device.

Tap in the bottom-right, then tap Security Policies.

Tap the required security policy, then tap Advanced Settings.

Set the Session Lifetime, Idle Session Timeout, and Concurrent Sessions.

1. Session Lifetime: This setting automatically signs your users out of a session after the specified number of days.
   
2. Idle Session Timeout: This setting automatically signs your users out of a session if they haven't used it in the specified time period.
   
3. Concurrent Sessions: This setting specifies how many browsers or devices a user can be signed in from at a time. 

Android

Open the Zoho One Admin app on your mobile device.

Tap in the bottom-right corner, then tap Security Policies.

Tap on the required security policy, then tap Advanced Settings.

Set the Session Lifetime, Idle Session Timeout, and Concurrent Sessions.

1. Session Lifetime: This setting automatically signs your users out of a session after the specified number of days.
   
2. Idle Session Timeout: This setting automatically signs your users out of a session if they haven't used it in the specified time period.
   
3. Concurrent Sessions: This setting specifies how many browsers or devices a user can be signed in from at a time.