How to manage user authentication

When users log into Atlan, a user session begins. You can change the default timeouts for user sessions for all users in your organization, helping you establish secure authentication protocols in Atlan. Once you have configured the settings, these would be applicable to users logging in via both basic and SSO authentication.

Atlan currently only supports configuring session settings up to a maximum value of 30 days. You must also enter a minimum value of 1 minute.

You can configure the following parameters:

• Session idle timeout — the total length of time that a session is allowed to be idle before it expires.
• Session max timeout — the maximum amount of time before a session expires.
• Remember me session idle timeout — the total length of time that a Remember Me session is allowed to be idle before it expires. If you choose not to set this parameter, Atlan will use the standard SSO session idle value, 7 days.
• Remember me session max timeout — the maximum amount of time before a session expires if a user has enabled the Remember Me session option. If you choose not to set this parameter, Atlan will use the standard SSO session max value, 4,745 days.

Note that tokens and browser sessions become invalid when a session expires.

Configure session settings

To configure user authentication settings in Atlan:

1. From the left menu in Atlan, click Admin.
2. Under Workspace, click Authentication.
3. Under Authentication, to the right of Session settings, click the Edit button.
4. Atlan currently only supports setting a maximum value of up to 30 days. In the Change session settings dialog, you can configure the following:
   1. Set a numeric value for the following fields (You must enter a minimum value of 1 minute.):
      • Session idle timeout
      • Session max timeout — you must enter a value same as or higher than Session idle timeout.
      • Remember me session idle timeout
      • Remember me session max timeout — you must enter a value same as or higher than Remember me session idle timeout.
   2. Click the Days dropdown to specify the validity period. You can define parameters in the form of Minutes, Hours, or Days.
   3. Click Save changes to save your configuration.