LL::NG rely on a session mechanism with the session ID as a shared secret between the user (in SSO cookie) and the session database.
To configure sessions, go in Manager, General Parameters
ยป Sessions
:
Opening conditions: a rule that will be evaluated to grant session to a user.
-
Sessions timeout: Maximum lifetime of a session. Old sessions are deleted by a cron script.
Sessions activity timeout: Maximum inactivity duration.
Session activity timeout requires Handlers to have a write access to sessions database.
Note that since
HTTP protocol is not connected, restrictions are not applied to the new session: the oldest are destroyed.