User session longer than the setting in glide.ui.session_timeout

[Linda Kendrick]

I have set the glide.ui.session_timeout to 20 minutes. We are having users install a browser extension that does an automatic refresh. The session is getting refreshed according to the setting in the extension. If a user sets this to 5 minutes, then the session is refreshed every 5 minutes. The 20 minutes timeout setting in ServiceNow doesn't make the user login in again. The session inactivity never gets to 20 minutes. There are users who have set this to every 5 minutes - 15 minutes. Users are also not logging out at night or over the weekend creating excessive and unnecessary log entries.

Has anyone run across this or have an idea to how to really end a users session after a specified time?

[eican]

What you want to do is to terminate the user session manually.

The refresh what you describe is basically working like a heartbeat and therefore keeps the session alive.

You could agree with the business on a time when to terminate all user sessions and run a scheduled job for that.

But be aware that if a user is currently working on a ticket, he/she will lose everything when hitting "Update".

We had some issues with that in the beginning (that user session's terminated for some reason) and now that no longer happens and our users are pretty happy.

[Linda Kendrick]

There are times where some of the users are not listed in the Users Administration > Logged in Users so I can't manually terminate the session either.

[eican · Accepted solution]

There is a business rule on sys_user called "Lock Out User".

The script is utilizing a GlideSession object - that looks like it would do the job and you could run it for all users (except admins and MID server and other system users)

[Linda Kendrick]

I will look into that. thanks!