Arbor session tokens / cookies question

[timbo343]

Question to those schools using Arbor. Once you have logged into the system and you either close the browser or the last tab that was running an Arbor active user session and browse back to Arbor, have you got to log back into the system with username / password and 2FA or is there a time out cookie that remembers you and times out after a certain amount of time?

 

As we are moving from Bromcom to Arbor, one of the bug bears for staff is that if staff close a browser window or close the last active session in the MIS, the user has to log back into the MIS which causes real frustration.

[5tu]

Isn't this a preferred behaviour?  Otherwise users could potentially leave a session open on a shared computer and unauthorised users gain access...

[timbo343]

Just need to know so we can brief the staff that's all and if we are using MS or Google for SSO, would the cookie be linked to the Google or MS authentication?

 

The same principle applies with SSO. If we are using SSO and the Cookie token is still active, the MIS session could still be left open.

[SpreadsheetJockey]

Well I just tried it, and closing the tab and opening a new one kept the session, but closing the browser and re-opening required a new sign-in.

[timbo343]

1 minute ago, SpreadsheetJockey said:

Well I just tried it, and closing the tab and opening a new one kept the session, but closing the browser and re-opening required a new sign-in.

 

Thanks for testing 👍