Question HLAA-09

Does your application automatically lock the session or log-out an account after a period of inactivity?

Standard Guidance

EDUCAUSE provides no guidance here

Describe any plans to support automatic lock or log-out.

Describe the default behavior of this capability.

This is a question to ensure account integrity and institutional data confidentiality.

Follow-up inquiries for IAM requirements will be institution/implementation specific.

[Add expert insights and best practices]

[Add practical steps for SME SaaS vendors]

[Add common questions related to this HECVAT item]

[Add links to relevant articles or tools]