cancel
Showing results for 
Search instead for 
Did you mean: 

Portal Session Timeout

Former Member
0 Kudos

Hello Experts,

We would like to configure session timeout for portal.

I came across many discussions regarding this topic.

Most of them talk about custom development.

Few have tried to use standard session timeout and logon ticket timeout but they faced issue -

'Active users are also logged of from portal after specified time.'

What I would really like to know is that isn't there any configuration option provided with standard portal?

It is very common requirement , and I see most of the consultants going for custom development to achieve this requirement.

Anyone can throw light on why this configuration option is missing in standard portal?

Is it available in latest versions?

Regards,

Apurva

Accepted Solutions (0)

Answers (3)

Answers (3)

Former Member
0 Kudos

Hi Apurva,

Have you found a solution to this? I'm also interested in this functionality. I would like to be able to control after how long time a portal will be logged out.

Regards,

Christoffer

Former Member
0 Kudos

Hi Christoffer,

No, I still haven't got any out-of-box solution to this requirement.

All the information got till now suggests that we will have to go for custom development for this requirement.

This is such a common requirement. It is very strange that SAP has not provided configuration option in portal for this requirement.

Please let me know if you get solution to this requirement.

Regards,

Apurva

Former Member
0 Kudos

Hi Apurva,

Please  olso check the  following notes on portal session inactivity-SAP Note 1650050 and  SAP Note 1599643.

Regards

shrikant

Former Member
0 Kudos

Hi Apurva,

There is no configuration option provided in the standard portal .

Basically, there are two sessions:
1. UME Session: This is basically held in the user's browser memory as a cookie with a specified validity. If opening a new window with ctrl-n,the same space is used. When closing the browser or when logging off,the cookie is deleted (on client side). This is the session which is controlled by the parameter login.ticket_lifetime.

2. The servlet http session: This session is hold by the engine. It times out after default 30 minutes. This value can be maintained in the web.xml. Even if this session times out, the user is still logged in
because of 1. But his context in statefull iViews gets lost. You customize this session timeout in the property files of the SAPJ2EE engine: the servlet_jsp service has a global-web.xml file which defines
the span of the session timeout by default for all applications, in minutes. It is set by default to 30.
<session-config>
<session-timeout>30</session-timeout>
</session-config>

The information can be found at the following URL Specifying HTTP Session Timeout:-
http://help.sap.com/saphelp_nw04/helpdata/en/bd/6ca740aa053a13e10000000a155106/content.htm

Regards

shrikant