Limit integrations' active session life span
The glide.integrations.active.session.life_span property enforces max lifespan on active guest HTTP sessions irrespective of inactive timeout. The configured value is in minutes. A value of zero will disable timing out the active sessions.
This configuration enforces the max lifespan on active guest HTTP sessions irrespective of inactive timeout. The configured value is in minutes and the value of zero will disable timing out the active sessions. This particular property is limited to integrations that have low-privilege access to an instance.
Set the glide.integrations.active.session.life_span system property to a value greater than 0 and less than or equal to 720.
More information
| Attribute | Description |
|---|---|
| Configuration name | glide.integrations.active.session.life_span |
| Configuration type | System Properties \(/sys\_properties\_list.do\) |
| Data type | Integer |
| Recommended value | less than or equal to 720 |
| Default value | 0 |
| Fallback value | 0 |
| Category | Session management |
| Security risk | - Severity score: 4.2 - CVSS rating: Medium - Security risk details: A larger maximum lifespan could allow an attacker to persist in a stolen session for longer, increasing the scope of a security incident. |
| Functional impact | None |
| Dependencies and prerequisites | None |
Parent Topic:Session management