Critical Description
With the recent work of KNOX-2961, the new SSO token invalidation functionality, Knox could provide idle session timeout behavior for UIs.
It will likely not include the usual UI pop-up approach (like when the end-user is informed about being idle too long), but it would effectively terminate idle SSO sessions and force an explicit login.
It's also worth mentioning the idleness measurement solely depends on backend activities through the KnoxSSO Cookie federation filter. and will not take any client-side action (such as scrolling on the page, client-side pagination, etc..) into account.
Attachments
Issue Links
- links to
