Overview

As part of our ongoing efforts to keep your platform as safe and secure as possible, we continuously upgrade our framework with the latest security, stability, and performance versions. A 30-day session expiry has been implemented, requiring re-authentication every 30 days.

Session expiry is important because it helps protect users and our applications from security threats: 

• Security
  • Session expiry prevents unauthorized access to sensitive information by automatically logging out users after a period of inactivity. 
• Compliance
  • Session expiry can help organizations comply with data protection regulations. 
• Resource management
  • Terminating idle sessions frees up server resources and improves system performance. 
• Threat protection
  • Session expiry limits the time attackers have to access a user's session and perform malicious actions. 

What to Expect

• Session expiration following the end of the 30-day period will happen at Midnight, depending on the Time Zone selection located on the My Profile page. If no selection is made for Time Zone, it will default to Midnight Eastern.
• Once the session has expired, the next time the page is accessed, the application will redirect to the logged-out page, displaying the message "You are now logged out." and the "Please Log in" link.
• For those who are active near the time their session is due to end;
  • 15 minutes from session expiration, a banner will display

    • Your session will expire in fewer than <10-2> minutes; please save any changes. To initiate your new session, log out and log back in for a fresh start!

      If Single Sign-On is available, please log in again using that method.

  • This banner will update the minutes from session expiration each time the page is reloaded down to 1 minute, then 60 seconds
  • 60 seconds from session expiration, a banner will display

    • Your session will expire in fewer than 60 seconds; please save any changes. To initiate your new session, log out and log back in for a fresh start!

      If Single Sign-On is available, please log in again using that method.

  • When the 15 minutes have elapsed, the next action taken in the application will redirect to the logged-out page, which will display the message "You are now logged out." and the "Please Log in" link.