A pop-up appears with a timer if the user is about to time-out, and once timed out the page is redirected to the login page. 

Hi there! There has not been any resolution to the question. 

If they open the URL in Incognito they will be prompted to login again, and at that point we collect a variable that indicates they are logged in. 

If they open in Incognito they will be prompted to login again.

Hi there! Thank you for responding.  Users are logged out at 20 minutes. Regardless, isn't Entry Page based on visitor cookie? Not session cookie? I'm not sure how an entry page/URL is populated with a secured page/URL when there's literally no way for a user to start a session (or visit) without lo...

How is it that an Entry Page/URL is returning Pages/URLs that could not possibly be entry points? The Pages/URLs can only be accessed by logging in, that means the Entry Page/URL would be the login page (or any other page that does not have to be logged in to view).