---
sourceDocument: Australia Platform security
sourceDocumentLink: https://servicenow-prod.fluidtopics.net/r/de-DE/platform-security

 Release :

    - australia

ft:locale :

    - de-DE

ft:publication_title :

    - Australia Platform security

ft:clusterId :

    - psec

bundleId :

    - psec

workflow :

    - Platform


---

# Minimize session activity timeout duration \[Updated in Security Center 1.3\]

# Minimize session activity timeout duration \[Updated in Security Center 1.3\] {#ariaid-title1}

* Freigeben Version: Australia
* 
* Aktualisiert 12. März 2026
* 
* ![](https://www.servicenow.com/docs/portal-asset/ico-clock) 1 Minute Lesedauer

Use the glide.ui.session_timeout property to designate, in
minutes, activity timeout value.
There are several functional impacts from setting this property:

* The longer the specified session time-out, the greater the amount of memory is utilized during a processing session. The base system uses a default Apache Tomcat timeout duration of 30 minutes.
* The ServiceNow AI Platform still logs out users out with Remember Me. After 30 minutes of inactivity in the application, the platform logs the user out automatically, unless the Remember Me check box in the login page is selected. What 's different is that they don't log in again to continue.
* If there are gauges or content on users' home pages that refresh automatically, then this timeout may never be reached.
{#sc-session-activity-timeout__ul_g3l_5hq_llb}

## More information {#sc-session-activity-timeout__section_more_information}

{#sc-session-activity-timeout__table_ajc_b43_3kb__entry__2}

| Attribute | Description |
|-|-|
| Property name | glide.ui.session_timeout |
| Configuration type | System Properties (/sys_properties_list.do) |
| Category | [Session management](https://servicenow-prod.fluidtopics.net/VAFB7gAR3D02VvnVYJ_a3g "This category looks at the security of the application state for a user. Sessions should be unique to each individual, unable to be guessed or shared, and invalidated after periods of inactivity or when not required. This includes factors such as cookie attributes for cookie-based sessions, session token generation, and storage and requirements for federated re-authentication.") |
| Purpose | To enforce session timeout. |
| Recommended value | User specified timeout in minutes. 60 minutes is the recommended value, but this value may vary depending on functionality and security requirement. Do not set this value to more than one day. |
| Security risk rating | 7.5 |
| Functional impact | This remediation enforces timely expiration of user account. No functionality impact, however User experience is altered. |
| Security risk | (High) User sessions being active for indefinite amount of time is a security risk and should expire on a time-based configuration. |
| References | [Manage user sessions](https://www.servicenow.com/docs/access?context=c_ManageUserSessions&version=australia&pubname=australia-platform-administration&ft:locale=en-US) |
[ ]

{#sc-session-activity-timeout__table_ajc_b43_3kb}

To learn more about adding or creating a system
property, see [Add a system property](https://www.servicenow.com/docs/access?context=t_AddAPropertyUsingSysPropsList&version=australia&pubname=australia-platform-administration&ft:locale=en-US).