How to close user session after 30 minutes of inactivity In AEM 6.1

[ddigal]

How to close user session after 30 minutes of inactivity In AEM 6.1

[kautuk_sahni]

Hi 

Please have a look at this old forum post:-

Link:- http://help-forums.adobe.com/content/adobeforums/en/experience-manager-forum/adobe-experience-manage...

//

How to set timeout for login-token

AEM is REST based, does not have the concept of session which makes every request atomic.  For accessing protected resources at time of successful login, Token authentication handler would issue a login-token cookie and subsequent authentication is based on login-token cookie. With this for all request credentials are not requested till expiry of cookie. Steps to configure the timeout for login-token is

• AEM 5.6.1 or below follow https://forums.adobe.com/thread/1035785
• AEM 6+  configure tokenExpiration at http://<host>:<port>/system/console/configMgr/org.apache.jackrabbit.oak.security.authentication.toke...
•  Also make sure to set Token Length otherwise will throw exception "org.eclipse.jetty.servlet.ServletHandler / java.lang.IllegalArgumentException: Invalid token ''"

 

• More details on AEM6+ refer http://jackrabbit.apache.org/oak/docs/security/authentication/tokenmanagement.html

Link:-http://www.aemstuff.com/#article964

I hope this would help you.

Thanks and Regards

Kautuk Sahni

[ddigal]

Thanks Kautuk for sharing the above link

[kautuk_sahni]

ddigal wrote...

Thanks Kautuk for sharing the above link

Is it working for you? If so please mark this answer as correct.

[ddigal]

Hi Kautuk ,

Its working for only admin session please let me know how to configure it for user session .

Thanks

[rsirigeri]

Hi @ddigal ,
Did you find the way to close user sessions which are open for a long time?