Apply continuous authentication policies to mobile sessions

Reduce the risk of session hijacking by applying continuous authentication policies to mobile sessions.

Ensure that mobile users are using the high assurance session feature of the Zero Trust - Continuous Authentication plugin by setting the glide.zta.high_assurance.mobile.session.allowed system property to false. To bypass continuous authentication policies for mobile sessions, set this property to true.

Set the glide.zta.high_assurance.mobile.session.allowed system property to false. This action decreases the risk of session hijacking and persistent access if a session is compromised. If this property doesn’t appear in the System Properties [sys_properties] table, the default value is false.

More information

Attribute	Description
Technical configuration name	glide.zta.high_assurance.mobile.session.allowed
Plugin applicability	Zero Trust - Continuous Authentication (com.snc.zero_trust_continuous_authentication)
Security risk	If this system property set to true, the high assurance session feature isn’t applied to mobile sessions. Reauthentication doesn't happen as defined in policies for high role sessions. This increases the risk of session hijacking and persistent access if a session is compromised.
Common Vulnerability Scoring System (CVSS) score	3.9
Common Vulnerability Scoring System (CVSS) rating	Low
Functional impact	If set to true, the high assurance session feature doesn’t apply to mobile sessions, which increases the risk of session hijacking and persistent access if a session is compromised.
Dependencies and prerequisites	None
Data type	Boolean
Base system value	false
Fallback value	false
Recommended value	false

To learn more about adding or creating a system property, see Add a system property.