In Tax, users can set a preferred session timeout value with a maximum value of 30 minutes. Session timeouts are crucial for maintaining security and protecting your data.
Implementing a session timeout is crucial for safeguarding your web application and its users against multiple security threats, including session hijacking, session fixation, cross-site request forgery, and brute force attacks.
These attacks take advantage of the fact that certain web applications fail to invalidate a user's session after they log out, close their browser, or move to a different device. Implementing a session timeout can reduce the time frame in which attackers can hijack a user's session to carry out malicious activities.
For high-risk web applications, it is recommended to use a shorter session timeout since the data is confidential and the transactions are critical.
Set the session timeout
Each user logs in to Tax.
Go to the username in the top right corner, then choose My Profile.
Set the Timeout minutes, then click Save.