---
sourceDocument: Australia Platform security
sourceDocumentLink: https://servicenow-prod.fluidtopics.net/r/de-DE/platform-security

 Release :

    - australia

ft:locale :

    - de-DE

ft:publication_title :

    - Australia Platform security

ft:clusterId :

    - psec

bundleId :

    - psec

workflow :

    - Platform


---

# Proactively Invalidate Sessions After Defined Durations

# Proactively Invalidate Sessions After Defined Durations {#ariaid-title1}

* Freigeben Version: Australia
* 
* Aktualisiert 12. März 2026
* 
* ![](https://www.servicenow.com/docs/portal-asset/ico-clock) 1 Minute Lesedauer

The glide.active.session.timeout.invalidate.session property controls whether a timeout session is proactively invalidated before the Tomcat server.
When glide.active.session.timeout.invalidate.session isn't set to true, there's a small interval of time where a timed-out session isn't invalidated proactively before the Tomcat container invalidates the
session. The duration of this time interval is dependent on additional properties representing differing use cases.  
{#sc-proactively-invalidate-inactive-sessions__table_ltm_tp1_nhc__entry__2}

| Property | Description |
|-|-|
| glide.ui.active.session.life_span | The value of this property defines the time, in minutes, before a UI session is invalidated. |
| glide.guest.active.session.life_span | The value of this property defines the time, in minutes, before a guest session is invalidated. |
| glide.integrations.active.session.life_span | The value of this property defines the time, in minutes, before an integrations session is invalidated. |
[ ]

{#sc-proactively-invalidate-inactive-sessions__table_ltm_tp1_nhc}

Ensure that the property glide.active.session.timeout.invalidate.session is set to true.

## More information {#sc-proactively-invalidate-inactive-sessions__section_qhx_1b1_xwb}

{#sc-proactively-invalidate-inactive-sessions__table_ajc_b43_3kb__entry__2}

| Attribute | Description |
|-|-|
| Configuration name | * glide.active.session.timeout.invalidate.session * glide.ui.active.session.life_span * glide.guest.active.session.life_span * glide.integrations.active.session.life_span {#sc-proactively-invalidate-inactive-sessions__ul_or5_fq1_nhc} |
| Configuration type | System Properties (/sys_properties_list.do) |
| Data type | Boolean |
| Recommended value | true |
| Default value | false |
| Fallback value | false |
| Category | [Session management](https://servicenow-prod.fluidtopics.net/VAFB7gAR3D02VvnVYJ_a3g "This category looks at the security of the application state for a user. Sessions should be unique to each individual, unable to be guessed or shared, and invalidated after periods of inactivity or when not required. This includes factors such as cookie attributes for cookie-based sessions, session token generation, and storage and requirements for federated re-authentication.") |
| Security risk | * Severity score: 4.6 * CVSS score: Medium * Security risk details: If a session is hijacked, an attacker may be able to use a session during this small period. {#sc-proactively-invalidate-inactive-sessions__ul_g1g_3sf_xwb} |
| Dependencies and prerequisites | None |
[ ]

{#sc-proactively-invalidate-inactive-sessions__table_ajc_b43_3kb}