UI sessions force logoff after 60 minutes despite active usage

Products

• VCF Automation

Issue/Introduction

• While actively using the VCF Automation (formerly VMware Aria Automation) UI, the session is terminated and the user is forced to log off.
• The logout occurs consistently after approximately 60 minutes of use.
• Navigation or activity within the UI does not reset the session timer.
• The issue is observed across multiple browsers, including Google Chrome and Mozilla Firefox, including Incognito/Private modes.

Environment

• VMware Cloud Foundation (VCF) 9.1.0
• VCF Automation (formerly VMware Aria Automation) 9.1.0

Cause

This is a known issue where the underlying authorization token has a hardcoded lifetime of 60 minutes. This token does not honor the UI session inactivity timeout settings, resulting in a forced logout even when the user is actively working.

Note on Multi-Tab Behavior: User sessions exist globally on the server and are managed via browser cookies, meaning they do not belong to any individual browser tab. Regardless of which application components (e.g., Consumer, Orchestrator) a user opens across multiple tabs, only a single unified session exists. Consequently, if that session is terminated from any single tab for any reason—such as user inactivity or a manual logout—all open browser tabs will log out simultaneously.

Resolution

A formal resolution for this issue is scheduled to be included in a future patch release of the product. 

Workaround

To mitigate this issue until the formal patch is released, the Access Token Lifetime value can be increased (i.e. 8 hours - 28,800 seconds) under OIDC services in the provider portal.

 

Additional Information

Getting Warning pop-ups to reload tab / window when using multiple tabs

Subscribe to this article for updates: Subscribe to a Broadcom knowledge article by article or product