In general, the session policy is used to control sessions of the DualShield web consoles, such as the Admin Console (DAC), User Self-Service Console (DSC), etc. 

However, the session policy can also be used to control the following types of applications

  • Third-Party SAML applications
  • Outlook Anywhere
  • Exchange ActiveSync


The policy can be found by navigating to "Administration | Policies", then scrolling down to the policy "session system policies";


The session system policy settings can be edited by using the context menu option "Edit";


A new window will now open titled "Policy - Edit" that can be used to view and edit the policy settings for this policy;




The category for this policy is "Session" (this property cannot be edited).

The holder of this policy is "System" (this property cannot be edited).

The name assigned to identify the lockout system policy by the System Administrator.

The System Administrator may use this field to annotate this policy.

This option allows the System Administrator to enable or disable this policy.


The session will be terminated if no user activity has been detected in the last N minutes. 

If a non zero value is supplied then this value determines how many inactive minutes can pass before the session closes.

 


The session will be terminated after N minutes regardless of whether there have been user activities or not.

If a non-zero value is entered then this value determines the maximum length of time (in minutes) for each session.

When the session policy is used in the following applications, the policy options might have different meanings. 

Since version 5.9.6 this policy setting will set the SessonNotOnOrAfter attribute in SAML assertion.


  • No labels