How Auto Logout feature works in the Session Management module

Overview

Sometimes users forget to log out, leaving their sessions idle—which can pose a security risk, especially for admin accounts. The Auto Logout feature in our Session Management module helps prevent this by automatically signing users out after a period of inactivity. In this guide, we’ll walk you through how it works and how to set it up.

Installation Steps

• Using Composer
• Using Drush
• Manual Installation

• Download the module:

  composer require 'drupal/session_management'

• Navigate to Extend menu on your Drupal admin console and search for Session Management using the search box.
• Enable the module by checking the checkbox and click on the Install button.
• You can configure the module at:

  {BaseURL}/admin/config/people/session-management/session-management

• Install the module:

  drush en drupal/session_management

• Clear the cache:

   drush cr

• You can configure the module at:

  {BaseURL}/admin/config/people/session-management/session-management

• Navigate to Extend menu on your Drupal admin console and click on Install new module.
• Install the Drupal Session Management module either by downloading the zip or from the URL of the package (tar/zip).
• Click on Enable newly added modules.
• Enable this module by checking the checkbox and click on install button.
• You can configure the module at:

  {BaseURL}/admin/config/people/session-management/session-management

Configuration Steps

• Navigate to Configuration > People > Session Management.
  (/admin/config/people/session-management/session-management)

User Auto logout:

• After successfully installing the module, you will be redirected to the Session Management tab.
• Go to the Auto Logout Settings tab and scroll down to the User Auto Logout Settings section.
• Turn on the Auto Logout toggle button, and set the Logout Timeout and Response Time for when you want the session to log out.
• Click the Save Configuration.

• With the Exclude admin from auto logout option, you can prevent users with administrative roles from being logged out automatically.

Lets see how it works:

• Open a new browser, such as Edge, or a private/incognito window and log in (base_url/user/login) to the Drupal site.
• As you can see, the user is logged out after the time period set in the configuration.

Congratulations! You have successfully configured the User Auto Logout feature.

If the configuration was not successful, please contact us at drupalsupport@xecurify.com. Kindly include a screenshot of the error message, and we will help you resolve the issue and guide you through the setup.

Related Articles

• Session Monitor Configuration
• User Session Limit