function readOnly(count){ }
Starting November 20, the site will be set to read-only. On December 4, 2023,
forum discussions will move to the Trailblazer Community.
+ Start a Discussion
FandangoFandango 

Session Time Out

Questions:

1. According to API doc., the default session time out is 2 hour ?
2. Can it be changed ?
3. Does changing the session time out parameter in salesforce for a user have any effect on the session time out for webservice created session ?
4. Is there a way to transfer the user to some specific page (like http://xyz.abc/whatever.html) when the session is expired ?
5. Please clarify: session time out (say 2 hours) from salesforce server means when there is no activity going on between salesforce and client for 2 hours

Thanks
FandangoFandango
Questions:

1. According to API doc., the default session time out is 2 hour. Can it be changed ?

2. Does changing the session time out parameter in salesforce for a user have any effect on the session time out for webservice created session for the same user ?

3. If a user is logged in using a webservice and than the user is transfered to salesforce.com which session time out limit will be applicable for the user ?

4. Is there a way to transfer the user to some specific page (like http://xyz.abc/whatever.html) when the session is expired ? I mean is there a way to configure it using salesforce or API calls ?

5. Please clarify: session times out (say after 2 hour) from salesforce server means when there is no activity going on between salesforce and client for 2 hours.

Thanks
SuperfellSuperfell
1. No, its a fixed 2 hours (this is likely to change in the future)

2. No

3. when you use frontdoor.jsp to take an existing session and use it for the website, it generates a new session for the website. (so now there are 2 different sessions), the one generated by frontdoor.jsp will use whatever timeout specified in setup.

4. No

5. For the API, the session timesout 2 hours after it is created regardless of activity. For the Website, new sessions are automatically created for the user under the covers as the expiry time approaches (assuming there is some activity)
FandangoFandango
Thanks for the answers.

If some web based application is integrated with salesforce i.e. the login page is displayed to the users from the clients app and than the user is transfered to salesforce after authentication, the user must be back to the clients application login page when the session is expired on salesforce side.

The users must not see the salesforce login page. The clients application may have one user id and password for multiple users which the users may not know. Transfering the users to the salesforce login page will confuse them.

This feature is needed to integrate our application with salesforce. If this feature is not provided by salesforce than please provide the workaround for this ?