topic Re: How to enforce log in after session timeout in QlikView

How to enforce log in after session timeout

arthur — Mon, 26 Jan 2026 18:19:17 GMT

Hi All.

For security reasons our client asked to enforce log in every time the user session times out.

The "Maximum Inactive Session Time" parameter does not solve this issue because the user can reconnect without having to log in again. Log in is necessary again only if the browser is closed and opened again.

Is there any way to force it in QVS 11?

Thanks,

Arthur

Re: How to enforce log in after session timeout

Bill_Britt — Thu, 25 Apr 2013 22:21:39 GMT

This is an issue with the browser caching the login ID and when the webserver ask for it IE is passing it again. I don't know of a way without changing the security in IE.

Bill

Re: How to enforce log in after session timeout

arthur — Fri, 26 Apr 2013 16:44:06 GMT

Hi Bill,

Thanks for your answer. Do you know what security settings should be changed in IE to prevent it from passing the login again?

Thanks,

Arthur

Re: How to enforce log in after session timeout

Bill_Britt — Fri, 26 Apr 2013 18:46:50 GMT

Hi Arthur,

I have not tested it, but I think the below would do it.

Bill

Re: How to enforce log in after session timeout

arthur — Fri, 26 Apr 2013 23:46:40 GMT

Hi Bill,

Unfortunatelly it did not work. Any other ideas?

Thanks,
Arthur

Re: How to enforce log in after session timeout

arthur — Tue, 30 Apr 2013 03:20:35 GMT

Hi Bill,

I think I have found a way: by changing the <SessionCookieTimeOut> parameter in the config file of the web server (ProgramData > QlikTech > WebServer > config.xml). Default value is 30 minutes.

Thanks for your insights.

Best Regards,

Arthur

Re: How to enforce log in after session timeout

Tue, 04 Jun 2013 14:47:55 GMT

Hi Artur!

We have the similar issue. In our congig.xml is the following line:

What should i change in this line for 5 min session and log in again?

Re: How to enforce log in after session timeout

arthur — Mon, 17 Jun 2013 20:58:18 GMT

Hi.

You should change it to <SessionCookieTimeOut> 5 <SessionCookieTimeOut>

Regards,

Arthur