3 ms·
> frequent re-logging We recently had to add that for $bigco requirements at $dayjob, I was stunned: they asked to log people out after — IIRC — 1h inactivity.
by masklinn 2y ago
> frequent re-logging
We recently had to add that for $bigco requirements at $dayjob, I was stunned: they asked to log people out after — IIRC — 1h inactivity.
- zdragnar 2y agoThat's a not-uncommon "security" feature $bigco will add as a requirement for buying software as well. Honestly, it's not a terrible policy if you're working with privileged information. A contact mine had with a big insurance company required a 30 minute inactivity logout I think. OTOH if your job is filling out spreadsheets and forms for a retailer and you don't even have access to customer info, it's way overkill. Nuance tends to be the first thing tossed out the window when dealing with $bigco though, too many people to manage smartly.
- MattPalmer1086 2y agoLogging out when there is no activity is quite a common security control requirement in many places. I've seen 15 minute inactivity log out quite frequently. Drives users mad of course (particularly admins who are logged in to many machines).
- masklinn 2y agoDevice logout makes perfect sense, but this is software logout, so would be in addition to the device one, in every piece of software. I hope and assume it goes along SSO making it less painful but still…