Who is this article for?

Users who want to force user logins to timeout.

No elevated permissions are required.

This article explains how to force user logins to timeout in Please Review.

1. Background

Please Review's polling and refresh activities keep users logged in. If a customer wants to enforce login timeouts due to inactivity, this can be set in the web.config file, as the Admin Client option is currently non-functional (case reference PR-25601).

2. Method

To manually edit the Web.config, note that saving will log all users out, so schedule accordingly:

• Locate the "sessionState" line and ensure timeout="n" is set (n is in minutes).
  • Update any commented-out versions for SSL consistency.
• Find the "authentication" line and ensure timeout="n" is set (n is in minutes).
  • Update any commented-out versions for SSL consistency.
• Locate the line starting with <add key="Tara.Web.AlertPollInterval"  and set value="0">

Saving will apply these changes.

3. Appendix

If the Admin Client functioned, the steps would be:

• Session timeout: set minutes for automatic logout.
• Authentication timeout: same as session timeout.
• Alert Poll Interval: set to ‘0’ to prevent automatic login.

These changes will restart the application, logging everyone out, so schedule accordingly.