---
sourceDocument: Brazil Platform security
sourceDocumentLink: https://www.servicenow.com/docs/r/platform-security

 Release :

    - brazil

ft:locale :

    - en-US

ft:publication_title :

    - Brazil Platform security

ft:clusterId :

    - psec

bundleId :

    - psec

workflow :

    - Platform


---

# Timeout guest sessions

# Timeout guest sessions {#ariaid-title1}

Release version: Brazil  
Updated September 10, 2026  
![](https://www.servicenow.com/docs/portal-asset/ico-clock) 1 minute to read  
Use a system property to control the inactive session timeout for unauthenticated users.
The glide.guest.session_timeout property controls the inactive session timeout for unauthenticated (guest) users, specified in minutes. New instances are provisioned with a default of 5 minutes. If the property does not exist in the sys_properties table, the effective value defaults to 0. When set to 0, the guest-specific override is disabled and the session instead uses the general UI session timeout (glide.ui.session_timeout).

Setting the glide.guest.session_timeout property greater than 30 minutes increases the number of sessions persisted by the instance, which may cause minor availability concerns.

To configure this property:

* Navigate to /sys_properties_list.do on the instance.
* Ensure the glide.guest.session_timeout property exists and is set to a value greater than 0 and less than or equal to 30 minutes.

## More information {#sc-timeout-guest-sessions__section_qhx_1b1_xwb}

{#sc-timeout-guest-sessions__table_ajc_b43_3kb__entry__2}

| Attribute | Description |
|-|-|
| Configuration name | glide.guest.session_timeout |
| Configuration type | System Properties (/sys_properties_list.do) |
| Data type | Integer (in minutes) |
| Recommended value | 30 |
| Default value | 5 |
| Fallback value | 0 |
| Category | [Business Logic](https://www.servicenow.com/docs/40fn4iiBxOFihxegwlFPPQ "This category looks at the logic and flow unique to each application with general secure principles. Specifically ensure that the intended sequence of business logic flow cannot by bypassed, that limits exist to detect and prevent automated attacks, and that protections against spoofing, tampering, information disclosure and elevation of privilege attacks exist.") |
| Security risk | * Severity score:4.3 * CVSS score: Medium * Security risk details: Setting the glide.guest.session_timeout property greater than 30 minutes increases the number of sessions persisted by the instance, which may cause minor availability concerns. {#sc-timeout-guest-sessions__ul_g1g_3sf_xwb} |
| Functional Impact | Guest sessions that remain idle longer than the configured timeout are ended, and any session-scoped state is lost. The guest user must start a new session to continue. Small timeout values can result in an undesirable user experience as sessions expire too rapidly. If there are availability concerns from persisting too many sessions in memory, the glide.guest.session_timeout property can be lowered to 5. |
| Dependencies and prerequisites | The glide.guest.session_timeout property interacts with the glide.ui.session_timeout property. When glide.guest.session_timeout is set to 0, guest sessions do not receive an independent idle timeout --- they fall back to using glide.ui.session_timeout instead. |
[ ]

{#sc-timeout-guest-sessions__table_ajc_b43_3kb}