Mobile App timeout

amolrajurkar
Kilo Contributor

We recently enabled Mobile App in Helsinki. Issue what we are facing is that it does not automatically timeout or logout a user. It is a security concern for our company and we need to logout a user after certain time.

Has anyone come across a settings which can help set auto logout on mobile.

18 REPLIES 18

Hi,



What I want is that after certain time ( testing in 2 sec) app should logout the user.



What I did was I opened the app and then kept working on mobile keeping app in background. When I came back to the app after some time I was stilled logged in. This same behavior happened when I opened the app and locked my mobile for   a long time.



Regards,
Amol


Appreciate a update on this please.


The behavior here has a few moving parts.



a) If the app is foregrounded (or it's process is still running) sessions will not expire.


b) If the application process has been suspended or terminated, the time for a valid session is then determined by the greater two things: The expiration time on the OAuth tokens, and the expiration of a web sessions cookie (if available).



Ultimately, the application performs several steps upon foregrounding/sending requests.


1) If a valid web session cookie exists, the app is authenticated.


2) If a valid OAuth Access Token exists, the app is authenticated.


3) If a OAuth Access Token is expired, the app will attempt to use a web session cookie or refresh token to retrieve a new Access Token and continue to be authenticated.


Thanks for the feedback, can you explain how can we force the app to go through SSO and then we can setup a timeout.


Hi , In the same context can you kindly help me if we have AD authentication on for mobile , how we can prevent prompting credential input everytime when the user Closes and reopens the mobile app?



Many thanks/Sharad.