Users get logged out more frequently in v4.0

[slewis74]

As a side effect of changes made in 4.0, users who have

• logged in using Active Directory integrated login
• logged in using forms based authentication and not selected the Remember my on this computer option

will get logged out if they leave the tab idle for greater than 20min.

The reason behind this is that the new portal stops polling the server once the tab is inactive, and restarts once it is activated again. If the tab has been inactive long enough for the session cookie to time out then the user will be logged out. The change in polling behavior was deliberate and in line with new measures to reduce resource drain on the machine coming from inactive tabs.

For forms based authentication, the user has opted to not be remembered so this behavior feels acceptable. For integrated AD login the user hasn't selected and we default to 20min, which feels like it should default to 20days like the OpenID Connect authentication.

[octoreleasebot]

Release Note: Active Directory integrated authentication cookie timeout has been increased from 20min to 20days

[lock]

This thread has been automatically locked since there has not been any recent activity after it was closed. If you think you've found a related issue, please contact our support team so we can triage your issue, and make sure it's handled appropriately.