User Session Expiration

Default Behavior

By default, when a user logs into FileCloud, their session remains authenticated for a specified amount of time.

Enabling Session Expiration for all Devices

If you want all login sessions on FileCloud user client devices to expire and require re-login, set the policy to Enforce session timeout for client devices.  

1. In the FileCloud admin portal's left navigation bar, scroll down and click Settings. Then, on the Settings navigation page, click Policies .
   The Policies settings page opens.

2. Click the Edit icon in the row for the users' policy.
   

   

3. Click the User Policy tab.

4. Set Enforce session timeout for client devices to yes.

   

5. Click Save.

Note: We don't recommend requiring session expiration for devices and other clients as it might impact functionality and reduce user friendliness.

Disabling Session Expiry when Browser is closed

Session expiry time is valid until timeout setting expires or the browser is closed. If the browser is reopened, the user must log in again.

If session should be valid even when the browser is closed, set the following config parameter to extend the browser timeout setting. For correct behavior, set this value to be significantly larger than the session timeout value, for example, if the session timeout is 30 days, then set this configuration to 90 days.

define("TONIDOCLOUD_BROWSER_COOKIE_TIMEOUT", 86400); // time in seconds that browser remains logged in irrespective of whether browser is closed