0

We have currently configured Session timeout as 2 hours on the API User Profile. Our Org. is connected to a .net application using these API User credentials. Say connection is established successfully with SF so the session id .net app use is going to be valid for 2 hours though there is no activity on it. 1. Is my understanding correct? 2. .net App(basically a tool) if closed after connecting it with SF and opened it within 2 hours time frame then can the same session id be used? Can someone please clarify?

1

For both of your questions the answer is Yes. But the time frame is maintained under the Session Settings in Setup.

As per docs:

The session timeout for an access token can be configured in Salesforce from Setup by entering Session Settings in the Quick Find box, then selecting Session Settings.

enter image description here

In Session Setting you can maintain all the configuration related to Session maintenance. But if any user change it at profile level then it will override this default value.

Understanding the OAuth Refresh Token Process

  • 3
    You can assign Session Length values to individual profiles, and it will override the default org settings. – sfdcfox Mar 23 '18 at 6:26
  • Thanks @Tushar and sfdcfox. Just one last question, is there any harm if I increase the session time out value to 12 or 24 hours? – Kanikala Mar 23 '18 at 12:29
  • @Kanikala There is no harm.you can do that – Tushar Sharma Mar 24 '18 at 12:53

Your Answer

By clicking “Post Your Answer”, you agree to our terms of service, privacy policy and cookie policy

Not the answer you're looking for? Browse other questions tagged or ask your own question.