Session idle timeout

The Session idle timeout setting controls how many minutes a Prophix One user can stay inactive before their session ends. "Inactive" means the user hasn't clicked, typed, or navigated anywhere in the application.

Whether this setting takes effect depends on whether the user selected Remember Me when they signed in:

  • If Remember Me was selected: The idle timeout applies in full. If the user stays inactive longer than the time you set, they're signed out. Their session also stays active through browser and computer restarts. This means if they close and reopen the browser within the timeout window, they'll return to their active session.

  • If Remember Me was not selected: The session ends as soon as the user closes the browser window. This happens no matter what idle timeout you set. In this case, the idle timeout has no effect.

Because of this difference, let your users know that the idle timeout only applies if they select Remember Me at sign-in. Anyone who doesn't select it will be signed out every time they close their browser.

When a session times out, the user is signed out and sent to the Prophix One sign-in page. Any unsaved work is lost. Choose a timeout that balances your organization's security needs with how your users typically work.

This setting applies to your entire organization and to all Prophix One applications. It does not affect users who are actively working.

Before you begin

• You must have the Account Admin role in Prophix One.

• Tell your users that they need to select Remember Me at sign-in for the timeout to apply to them.

Configure the session idle timeout

  1. Sign in to Prophix One and open Portal.

  2. In the Portal navigation, select Account Management > Security Settings.

  3. In the Session idle timeout (in minutes) field at the bottom of the page, enter the number of minutes of inactivity allowed before a user is signed out.

    This field is pre-filled with your organization's current timeout value.

    • The minimum value is 5 minutes.

    • The maximum value is 1200 minutes (20 hours).

     Tip:  Most organizations match this setting to their IT security policy. Financial planning environments commonly use 15 to 60 minutes. Check with your IT or security team if you are unsure.

  4. Select Apply.

    • The new timeout applies to all sessions going forward.

    • Sessions that are already active when you save will start using the new value once their session token refreshes.

    After you save, remind your users that they must select Remember Me on the Prophix One sign-in page to benefit from the timeout you configured. Users who do not select it will still be signed out whenever they close their browser.

Troubleshooting

I entered a value and got a validation error.

The timeout must be a whole number between 5 and 1200 minutes. Enter a value in that range and select Apply again.

I set a timeout, but users say their session still ends when they close their browser.

This happens when the user hasn't selected Remember Me at sign-in. The idle timeout only applies to sessions where Remember Me is on. Have affected users sign out, sign back in, and select Remember Me. Once they do, the timeout you set will apply and their session will carry over through browser and computer restarts.

I set a new timeout, but users say they're still being signed out at the old interval.

Timeout changes apply to new and refreshed sessions. Users who were already signed in before you saved the change may not see the new timeout until their session refreshes. Have them sign out and sign back in.

I don't see this field on my Security Settings page.

This field became available in release 2026.8. Confirm your organization is on release 2026.8 or later. If you're on a later release and still don't see it, contact Prophix Support.

FAQs

What counts as "idle"?

A session is idle when the user hasn't clicked, navigated, or entered data in Prophix One for the number of minutes you set. Background activity, like scheduled reports or agent runs, doesn't reset the idle timer.

Do users need to do anything for this setting to work?

Yes. Each user must select Remember Me on the Prophix One sign-in page. Without it, the session ends when the browser closes, and the idle timeout doesn't apply. With Remember Me on, the session carries over through browser and computer restarts, and the idle timeout controls when it ends due to inactivity.

What happens when a session times out?

The user is signed out and sent to the Prophix One sign-in page. Any unsaved work at that point is lost. They can sign in again right away.

Does this affect SSO users?

Yes. The idle timeout applies to everyone in your organization, including users who sign in through Single Sign-On (SSO). What happens after sign-out depends on your SSO provider's setup — some users may be redirected to their identity provider instead of the Prophix One sign-in page.

Can I set different timeouts for different user groups or applications?

Not currently. The session idle timeout is a single, organization-wide setting that applies to all users and all Prophix One applications.

Does changing this setting require a maintenance window?

No. The change takes effect as soon as you select Apply. It doesn't interrupt active sessions or require downtime.