FAQ - What is the timeout of the Product?

mark.thompson@oneadvanced.com Updated by mark.thompson@oneadvanced.com

The timeout for Browser use has been chosen due to the nature of the highly sensitive data stored in the system and to protect this data from a bad actors access to it. The amount of time chosen is based on industry standards.

Example source for industry standards- “The Open Web Application Security Project (OWASP) recommends application builders to implement short idle time outs (2-5 minutes) for applications that handle high-risk data, like financial information. It considers that longer idle time outs (15-30 minutes) are acceptable for low-risk applications.”

 

We continually assess this and understand that there is a balance between User Experience and Security. The recent Key Stroke and Care Plan Auto Save features are example of us listening to customers and finding ways to improve User Experience without compromising security.  

 

The timeout length is currently 20 minutes based on activity in the last 10 minutes of those 20 minutes. For example:

 

If the time of a user login is 9am:

  • If the user logs in and does nothing, they will be logged out after 20 minutes (not 5 or 10 minutes) - at 9:20am
  • If the user logs in and does work between minutes 1 and 9 (9am until 9:09am) and then stops , they will be logged  out after 20 minutes from the initial login -  at 9:20am
  • If the user logs in and does no work between minutes 1 and 9 (9am until 9:09am) and then does work at minutes 11 to 14  (9:11am to 9:14am)  and then stops working  , they will be logged out after 20 minutes from minute 14 - at 9:34am

The Mobile App timeout is controlled differently and has a different setting due to the added security of the  lock screen which requires a PIN if the App loses focus on the users device.

Was this article useful?

FAQ - Why can't we see all Residents in the Mobile App?

FAQ - Why am I seeing an error message in the Mobile App about option-set data not available?

Contact