3 ms·
There are two use cases here which are different. Inactivity session termination mostly just protects against someone using your device if you leave it tempora
by MattPalmer1086 3y ago
There are two use cases here which are different.
Inactivity session termination mostly just protects against someone using your device if you leave it temporarily unattended.
Absolute session termination is a different control, which protects against compromise of the session token. So someone who hacks the device and gets the session token can only use it for a period, after which they would need your credentials to get another one. This is usually longer than inactivity termination.