Salesforce CRM - The Definitive Admin Handbook - Fourth Edition

Session timeout

There are various features for setting the session timeout as per the following sections:

Timeout value

This sets the length of time after which inactive users are automatically logged out of the system.

Note

The options are between 15 minutes and 12 hours.As a system administrator you need to balance the requirements for user satisfaction and enforcement of security controls, however it is recommended that you choose as short a timeout period as possible to protect sensitive information and enforce stricter security.

The value of the last active session is not updated until halfway through the timeout period. So if you have a 2-hour timeout, the system does not check for activity until 1 hour has passed. As an example, say you have ...