Hi João,

What if I only want this implementation apply to one application only? Because if I configure in Factory Configuration will affect other applications in the environment.

Please correct me if I am saying it incorrect.

Thanks.

Hi Gwen,

You are right indeed. Since most of the times, the idea is to change at a factory level, I proposed the Factory Configuration which affects the whole factory.

If you want to control the timeout for an application only, you have the Browser Session Timeout component or if you prefer to do it yourself, it is explained in this post what you need to do.

Cheers,

João

Hi João,

Thanks for your information! I will try it out if it is workable for me :D 

Hi João,

Sorry for late respond.
I have tried the solution today. It works for me but my sequence of implementing the logic had gotten me in an infinite loop.

My question currently is how do I check if the user current session had been idle for 20 minutes? 

My sequence of logic currently are as below

1. Stores user userID, sessionID, GUID, and user login Date/Time  in an entity called UserSession when user login.
2. OnBeginWebRequest, I GetSessionTimeOut and check if it has exceed the system default timeout. If Yes, it will perform ClearSession and feedback message.

When I debug, I only found that this will got me in an infinite loop. 

Appreciate if you could guide me.

Thank you.

Cheers,
Gwen.

Hi Gwen,

I took a look at your file, and you just need to set the SessionTimeout on the OnSessionStart (in the example 5 minutes):

If you do that, once the user is 5 minutes "absent", he will be automatically logged out and redirected to the Login, if he has not chose the Remember Me option when he logs in:

If you want to force the user to logout in absence, you can remove the Remember me option from the screen and set it to False on the User_Login action:

Cheers,

João

Hi João,

Thanks for the advise and guidance! It worked if I set 'RememberLogin' to False. 

One quick question for my curiosity, if I want to maintain the 'RememberLogin' option and force user to logout in absence, is there other approach to achieve that?

Hi Gwen,

The remember login actually means use persistent login, you can read more here.

The credentials are saved for your next login or not depending on your browser settings, not related to this option although the label might lead in that direction.

Cheers,

João

Hi João,

The article is very helpful and helps me to understand. 

Thank you!