We recommend reviewing what is submitted before posting, in case your idea has already been submitted by another community member. If it has been submitted, vote for that existing feature request (by clicking the up arrow) to increase its opportunity of being added to Cireson solutions.
For more information around feature requests in the Cireson Community click here.
Session Countdown for Forms Based Logins Only
Internally, we have a portal web server with Windows auth and we don't really want session messages appearing. Externally, we have a portal web server where Forms based auth is used, for obvious security reasons, and it would be good for the session timer to appear for these users so they don't have to enter their credentials again.
Comments
If other customers wish to have some of their user activity logged anonymously by changing a setting, I have no issue with this feature as long as I still have the option of doing the opposite.
The current (7.0) functionality is extremely useful for Windows Auth, because it prevents user actions from being logged with the service account's ID instead of theirs. That was a deeply concerning flaw that has finally been resolved. Session timers are fairly common in other ITSM products, also when Windows Auth is used, so the warnings are not particularly irritating for my users. I can see how this might not be as important for other businesses, however.
Obviously this is from a wider business perspective than just IT.
The session timer can be disabled as below:
KB115:
By default the Session Timer is enabled and is recommended.
To disable the Session Timer go to Admin Setting > Settings Items and modify the value of the key "UseSessionTimer" to "false".
Important Note: Disabling the Session Timer is not recommended as the session timer resolves a number of issues. If you choose to disable the session timer you should be aware that the issues described in the section Issue Resolution may occur.