How to reduce the session timeout value for Administrators in arcotadmin application?

Products

• CA Advanced Authentication

Issue/Introduction

How to reduce the session timeout value for Administrators in arcotadmin application?

Environment

Release: 9.1.x
Component: Strong Authentication

Resolution

Currently the Administrator's login session is valid for 60 minutes(default) of inactivity. For better security it is advised to reduce the session expiry time as per your organizational requirements.

Instructions

Below is the change that needs to be done to reduce the session timeout value in arcotadmin.

In arcotadmin/WEB-INF/web.xml

search for session-config currently it shows 60 (minutes) , update it to 1.

<session-config>
<session-timeout>1</session-timeout>
</session-config>