Session Timeout
Session Timeout protects an unattended screen. When it is on, a user who has been inactive for the time you choose is locked out of Bizconnekt until they come back and prove it's them. The same page holds the Sign-in PIN setting, because the PIN is how users resume a locked session quickly.
Both settings apply to all users across every business unit in your organisation.
Session timeout
The timeout is off by default. With it off there is no inactivity timer at all — a session lasts for the Remember me duration the user chose when signing in.
Turn it on
- In the Admin console, open Configuration → Security → Session Timeout.
- Switch on Sign users out after a period of inactivity.
- Under How long can a user sit idle?, choose 30 minutes, 1 hour (the default) or 2 hours.
- Click Save.
What users experience
- A warning first. Users are warned 5 minutes before their time runs out. Any activity resets the clock.
- In the Bizconnekt app, the screen locks. The user resumes with their sign-in PIN when PIN login is allowed, they have set a PIN, and this browser is one of their devices that remember them. Otherwise they sign out and sign in again.
- In the Admin console, the user is signed out and signs in again with their password.
Sign-in PIN
A sign-in PIN is a 4-digit code users can set for fast sign-in on devices they've signed in to before — and it is what they enter to unlock a timed-out screen.
The Sign-in PIN card sits below the timeout switch. It can only be changed while the session timeout is on: with the timeout off, the card is dimmed and clicking it explains that you need to turn on session timeout first.
- Make sure Sign users out after a period of inactivity is switched on.
- On the Sign-in PIN card, switch on Allow PIN login for users in your organisation.
- Click Save on that card. It saves separately from the timeout.
What users do
With PIN sign-in allowed, each user manages their own PIN from their user menu → Sign-in PIN in the Bizconnekt app: set or change the 4-digit PIN, see which browsers remember them under Devices that remember you, and remove the PIN at any time. Removing it only takes away the shortcut — they can still sign in with their password or OTP.