{"id":3583,"date":"2026-08-24T07:59:32","date_gmt":"2026-08-24T07:59:32","guid":{"rendered":"https:\/\/zecurit.com\/help\/?post_type=docs&p=3583"},"modified":"2026-08-24T07:59:32","modified_gmt":"2026-08-24T07:59:32","slug":"session-settings","status":"publish","type":"docs","link":"https:\/\/zecurit.com\/help\/endpoint-management\/security-compliance\/session-settings\/","title":{"rendered":"Session Settings"},"content":{"rendered":"\n

Zecurit provides robust session control settings<\/strong> to help you protect access to your environment by managing session behavior across your organization.<\/p>\n\n\n\n

Only the Super Admin<\/strong> has permission to configure these settings.<\/p>\n\n\n\n

What you can configure<\/h3>\n\n\n\n

Under Settings \u2192 Security \u2192 Session Settings<\/strong>, you can customize the following:<\/p>\n\n\n\n

1. Session Expiry Period<\/strong><\/h3>\n\n\n\n

Sets the maximum duration a user can stay signed in without requiring re-authentication.<\/p>\n\n\n\n

    \n
  • Default Setting: 15 days<\/strong><\/li>\n\n\n\n
  • Effect:<\/strong> After the selected number of days, users will be logged out and prompted to log in again\u2014regardless of activity<\/strong>.<\/li>\n<\/ul>\n\n\n\n
    \n

    Use this setting to enforce periodic logins for additional security.<\/p>\n<\/blockquote>\n\n\n\n

    2. Session Idle Timeout<\/strong><\/h3>\n\n\n\n

    Defines the amount of inactivity time<\/strong> after which a user will be automatically logged out<\/strong>.<\/p>\n\n\n\n

      \n
    • Default Setting: 6 hours<\/strong><\/li>\n\n\n\n
    • Effect:<\/strong> If a user remains idle (no actions or clicks) for this duration, the session is terminated and they will need to log in again.<\/li>\n<\/ul>\n\n\n\n
      \n

      This helps prevent unauthorized access on unattended machines.<\/p>\n<\/blockquote>\n\n\n\n

      3. Concurrent Sessions Limit<\/strong><\/h3>\n\n\n\n

      Controls how many active sessions<\/strong> a user can have at the same time (e.g., on different browsers or devices).<\/p>\n\n\n\n

        \n
      • Default Setting:<\/strong> 3<\/li>\n\n\n\n
      • Effect:<\/strong> If a user tries to log in beyond the allowed limit, older sessions will be invalidated or blocked depending on system behavior.<\/li>\n<\/ul>\n\n\n\n
        \n

        Limits the risk of account misuse or session sprawl.<\/p>\n<\/blockquote>\n\n\n\n

        Important Notes<\/h3>\n\n\n\n
          \n
        • These settings apply organization-wide<\/strong> and affect all users and technicians<\/strong>.<\/li>\n\n\n\n
        • Only the Super Admin<\/strong> can view and change<\/strong> session settings.<\/li>\n\n\n\n
        • Users will see a warning or be auto-logged out based on these policies.<\/li>\n<\/ul>\n\n\n\n

          Best Practices<\/h3>\n\n\n\n
            \n
          • Combine session timeout controls with IP Restrictions<\/strong> and Two-Factor Authentication<\/strong> for enhanced access protection.<\/li>\n\n\n\n
          • Set shorter idle timeouts<\/strong> in high-security environments (e.g., shared workstations or public access areas).<\/li>\n\n\n\n
          • Regularly review session behavior from the Activity Log<\/strong> to audit usage patterns.<\/li>\n<\/ul>\n","protected":false},"featured_media":0,"parent":3575,"menu_order":2,"comment_status":"open","ping_status":"closed","template":"","meta":{"_is_vendor_doc":"0","footnotes":""},"doc_tag":[],"class_list":["post-3583","docs","type-docs","status-publish","hentry"],"comment_count":0,"_links":{"self":[{"href":"https:\/\/zecurit.com\/help\/wp-json\/wp\/v2\/docs\/3583","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/zecurit.com\/help\/wp-json\/wp\/v2\/docs"}],"about":[{"href":"https:\/\/zecurit.com\/help\/wp-json\/wp\/v2\/types\/docs"}],"replies":[{"embeddable":true,"href":"https:\/\/zecurit.com\/help\/wp-json\/wp\/v2\/comments?post=3583"}],"version-history":[{"count":1,"href":"https:\/\/zecurit.com\/help\/wp-json\/wp\/v2\/docs\/3583\/revisions"}],"predecessor-version":[{"id":3584,"href":"https:\/\/zecurit.com\/help\/wp-json\/wp\/v2\/docs\/3583\/revisions\/3584"}],"up":[{"embeddable":true,"href":"https:\/\/zecurit.com\/help\/wp-json\/wp\/v2\/docs\/3575"}],"next":[{"title":"Agent Protection","link":"https:\/\/zecurit.com\/help\/endpoint-management\/security-compliance\/agent-protection\/","href":"https:\/\/zecurit.com\/help\/wp-json\/wp\/v2\/docs\/3585"}],"prev":[{"title":"IP Restriction","link":"https:\/\/zecurit.com\/help\/endpoint-management\/security-compliance\/fg\/","href":"https:\/\/zecurit.com\/help\/wp-json\/wp\/v2\/docs\/3579"}],"wp:attachment":[{"href":"https:\/\/zecurit.com\/help\/wp-json\/wp\/v2\/media?parent=3583"}],"wp:term":[{"taxonomy":"doc_tag","embeddable":true,"href":"https:\/\/zecurit.com\/help\/wp-json\/wp\/v2\/doc_tag?post=3583"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}