Documentation
HECVAT Full v3.0.6
Authentication, Authorization, and Accounting
AAAI-13

Question AAAI-13

Does your application automatically lock the session or log-out an account after a period of inactivity?

Weight15
High RiskNo
RequiredYes
Compliant AnswerYes

Standard Guidance

EDUCAUSE provides no guidance here

Answering "NO"

Describe any plans to support automatic lock or log-out.

Answering "YES"

Describe the default behavior of this capability.

Reason for Question

This is a question to ensure account integrity and institutional data confidentiality.

Follow-Up Inquiries

Follow-up inquiries for inactivity protections will be institution/implementation specific.

HECVAT Pro Advice

[Add expert insights and best practices]

Implementation Tips

[Add practical steps for SME SaaS vendors]

FAQ

[Add common questions related to this HECVAT item]

Resources

[Add links to relevant articles or tools]