Managing sessions

Overview

This topic explains how session duration settings work in LaunchDarkly, and how to configure them based on your security policies. Session duration specifies how long an account member stays logged in to their account without visiting LaunchDarkly.

LaunchDarkly offers administrators a set of controls to manage how long account members stay logged in to their account, and how often they need to re-authenticate. You can also reset sessions for everyone in your organization, forcing them to re-authenticate the next time they access LaunchDarkly.

Configuring session length

Session timeout controls are in the Security tab, in the "Session configuration" section.

To change session length:

1. Navigate to the Account settings page.
2. Click into the Security tab and scroll to the "Session configuration" section:

3. In the Session duration fields, enter a number and choose a unit for the session length.
4. (Optional) Check the Refresh sessions automatically checkbox to reset the session start time every time an account member accesses LaunchDarkly.
5. Click Save.

Revoking all sessions

You can force all the members of an organization to re-authenticate at once from the Security tab.

To reset all sessions:

1. Navigate to the Account settings page.
2. Click into the Security tab and scroll to the "Revoke all sessions" section.
3. Click Revoke all sessions.