Files
docs-v2/manage/access-control/session-length.mdx
2025-10-30 17:11:44 -07:00

22 lines
1.0 KiB
Plaintext
Raw Blame History

This file contains ambiguous Unicode characters
This file contains Unicode characters that might be confused with other characters. If you think that this is intentional, you can safely ignore this warning. Use the Escape button to reveal them.
---
title: "Session Length"
description: "Configure maximum session length and expiration policies for your organization"
---
By default, Pangolin keeps extending a session indefinitely if a user is actively using it. If a user is not actively using the session, it will expire after 30 days.
However, you can require users to log in at regular intervals by enforcing maximum session lengths on a perorganization basis.
### Configuration
<Note>
Session length enforcement is an Enterprise Edition only feature.
</Note>
To enable session length enforcement, go to Organization Settings and set a maximum session length in the Security section. After this amount of time, users will be prompted to log back in to acquire a fresh session.
- Session length enforcement is configured per organization.
- Session length enforcement applies to both internal Pangolin users and users linked to external identity providers.
- Users whose session has expired will see a prompt directing them to log in again before proceeding.