<![CDATA[Force logout after browser close and/or certain duration]]>My request is to have an option to force a logout from Cloudron after a certain amount of time or after I close my browser.

Currently, the session persists even after I close my browser.

Thank you. 🙂

]]>https://forum.cloudron.io/topic/8596/force-logout-after-browser-close-and-or-certain-durationRSS for NodeMon, 05 Oct 2026 15:29:45 GMTThu, 02 Feb 2023 14:31:21 GMT60<![CDATA[Reply to Force logout after browser close and/or certain duration on Thu, 09 Apr 2026 12:49:58 GMT]]>Bump!
Please upvote if you think a configureable timeout for Cloudron SSO would add value to the platform.

Currently I am using PIN code verification via Cloudflare Access as a workaround, but ofcourse this only works if the domain is proxied by Cloudflare.

]]>https://forum.cloudron.io/post/123116https://forum.cloudron.io/post/123116Thu, 09 Apr 2026 12:49:58 GMT<![CDATA[Reply to Force logout after browser close and/or certain duration on Mon, 09 Mar 2026 01:58:42 GMT]]>For reference: https://auth0.com/docs/manage-users/sessions/configure-session-lifetime and https://support.okta.com/help/s/article/How-to-Adjust-Session-Lifetime-and-Idle-Value-for-Users?language=en_US

]]>https://forum.cloudron.io/post/121454https://forum.cloudron.io/post/121454Mon, 09 Mar 2026 01:58:42 GMT<![CDATA[Reply to Force logout after browser close and/or certain duration on Sat, 07 Mar 2026 19:21:47 GMT]]>Are there any plans to add SSO session timeout / inactivity timeout to Cloudron? I am finding that when I configure timeout (e.g. when browser is closed) within apps that are using Cloudron's SSO, the SSO is still keeping the user logged in.

Many businesses require sessions to expire after inactivity or browser closure for security audits.

If a user forgets to log out on a shared machine, a "timeout on close" or "idle timeout" is the only line of defense.

Most professional SSO providers (like Okta or Auth0) allow admins to set a "Max Session Age" or "Inactivity Timeout" at the platform level.

]]>https://forum.cloudron.io/post/121406https://forum.cloudron.io/post/121406Sat, 07 Mar 2026 19:21:47 GMT<![CDATA[Reply to Force logout after browser close and/or certain duration on Thu, 02 Feb 2023 19:12:00 GMT]]>@jdaviescoates said in Force logout after browser close and/or certain duration:

I guess is this is a real security concern for you, you could manually logout beforehand?

True.

My main reason for requesting this feature is that the administrative controls are only a few clicks away. I suppose I could create a separate non-admin user account for myself and run my apps under that account.

]]>https://forum.cloudron.io/post/61360https://forum.cloudron.io/post/61360Thu, 02 Feb 2023 19:12:00 GMT<![CDATA[Reply to Force logout after browser close and/or certain duration on Thu, 02 Feb 2023 16:58:32 GMT]]>@GregY said in Force logout after browser close and/or certain duration:

Currently, the session persists even after I close my browser.

Yes, I love that! 😛

I guess is this is a real security concern for you, you could manually logout beforehand?

]]>https://forum.cloudron.io/post/61353https://forum.cloudron.io/post/61353Thu, 02 Feb 2023 16:58:32 GMT<![CDATA[Reply to Force logout after browser close and/or certain duration on Thu, 02 Feb 2023 15:06:21 GMT]]>Currently the Cloudron dashboard does not use sessions, but an accessToken in the localStorage of the browser. This means when closing the browser tab, there is no solid way to clear that from a dashboard perspective.

Maybe we can use either localStorage or sessionStorage for this?

]]>https://forum.cloudron.io/post/61342https://forum.cloudron.io/post/61342Thu, 02 Feb 2023 15:06:21 GMT