Minimize session window timeout duration

Use the glide.ui.user_cookie.life_span_in_days property to set the expiration time period for the Remember Me cookie. The default value is 15 days and the maximum cap is at 30 days.

The glide.ui.user_cookie.life_span_in_days system property affects the expiry of cookies. After each successful authentication, the cookie will expire after the number of days specified as the property value. If glide.ui.user_cookie.life_span_in_days isn't set to the recommended value of 15 or less, then there is a higher risk that the cookie, if stolen, can be used for longer.

Ensure the property glide.ui.user_cookie.life_span_in_days is set to 15 or less.

More information

Attribute	Description
Configuration name
Configuration type	System Properties (/sys_properties_list.do)
Data type	Boolean
Recommended value	15 or less
Default value	<none>
Fallback value	15
Category	Session management
Security risk	Severity score: 4.9 CVSS rating: Medium Security risk details: A longer life span increases the time window that a stolen cookie can be used.
Functional impact	This property is enabled by the end user when the end user checks the Remember me check box from the login page and logs in to the ServiceNow AI Platform.
Dependencies and prerequisites	None