Skip to content

Session Lifetime Enforcement

LimaCharlie can enforce a maximum lifetime on web-app sessions for users in a specific email domain. Once enabled, users are automatically signed out of the web app after the configured duration, measured from the moment they last entered their credentials. They must then sign in again to continue.

This is typically used by enterprise and regulated customers who require periodic re-authentication, regardless of whether a user is actively using the web app.

How It Works

  • The configured maximum lifetime is applied to every user whose email belongs to the enrolled domain.
  • The countdown starts when the user authenticates (entering password, completing SSO, or completing MFA). Background token refreshes do not reset it.
  • When the limit is reached, the web app shows a brief notice and signs the user out. The user can sign back in immediately and a new countdown begins.
  • The limit applies to web app sign-in sessions only. It does not limit API keys or tokens, sensor enrollment, or integrations, so it is not a server-side cap on all access to your organization.

Scope

  • The setting is configured per email domain. All users authenticating with an email in the enrolled domain are subject to the same limit.
  • Customers with multiple email domains (for example, primary and secondary brands) can enroll each domain independently.
  • The setting can be combined with Strict SSO Enforcement and other per-domain authentication controls.

User Experience

  • During the session, no banner or countdown is shown — the experience is identical to a normal session.
  • At expiry, the user sees a short message indicating that the session has reached its maximum lifetime, and is redirected to the sign-in page.
  • For users who are already signed in at the moment the policy is first enabled for their domain, the countdown applies from their most recent sign-in. If that sign-in is already older than the configured limit, they are signed out shortly after enablement and asked to sign in again. Subsequent sessions follow the configured limit.

Requesting Enrollment

Session lifetime enforcement is configured by LimaCharlie staff. To enable it for your domain, contact your LimaCharlie account team or open a support request including:

  • The email domain (or domains) to enroll.
  • The maximum session duration (for example, "8 hours" or "7 days").