Qlik Community

QlikView Management

Discussion Board for collaboration on QlikView Management.

arthur
New Contributor III

How to enforce log in after session timeout

Hi All.

For security reasons our client asked to enforce log in every time the user session times out.

The "Maximum Inactive Session Time" parameter does not solve this issue because the user can reconnect without having to log in again. Log in is necessary again only if the browser is closed and opened again.

Is there any way to force it in QVS 11?

Thanks,

Arthur

Tags (3)
1 Solution

Accepted Solutions
arthur
New Contributor III

Re: How to enforce log in after session timeout

Hi Bill,

I think I have found a way: by changing the <SessionCookieTimeOut> parameter in the config file of the web server (ProgramData > QlikTech > WebServer > config.xml). Default value is 30 minutes.

Thanks for your insights.


Best Regards,

Arthur

7 Replies
Employee
Employee

Re: How to enforce log in after session timeout

This is an issue with the browser caching the login ID and when the webserver ask for it IE is passing it again. I don't know of a way without changing the security in IE.

Bill

arthur
New Contributor III

Re: How to enforce log in after session timeout

Hi Bill,


Thanks for your answer. Do you know what security settings should be changed in IE to prevent it from passing the login again?

Thanks,

Arthur

Employee
Employee

Re: How to enforce log in after session timeout

Hi Arthur,

I have not tested it, but I think the below would do it.

aaa.png

Bill

arthur
New Contributor III

Re: How to enforce log in after session timeout

Hi Bill,

Unfortunatelly it did not work. Any other ideas?

Thanks,
Arthur

arthur
New Contributor III

Re: How to enforce log in after session timeout

Hi Bill,

I think I have found a way: by changing the <SessionCookieTimeOut> parameter in the config file of the web server (ProgramData > QlikTech > WebServer > config.xml). Default value is 30 minutes.

Thanks for your insights.


Best Regards,

Arthur

Not applicable

Re: How to enforce log in after session timeout

Hi Artur!

We have  the similar issue. In our congig.xml is the following line:

<SessionCookieTimeOut> -1<SessionCookieTimeOut>

What should i change in this line for 5 min session and log in again?

arthur
New Contributor III

Re: How to enforce log in after session timeout

Hi.

You should change it to <SessionCookieTimeOut> 5 <SessionCookieTimeOut>

Regards,

Arthur

Community Browser