Setup the specified users session timeout or force logout after a certain period of inactivity.

[Aidan Chiu]

How to set up the specified user's session timeout or force logout after a certain period of inactivity?

I just saw the guide below, but I'm stuck on step 3. 

Set idle session duration in external user policy

The default setting for idle session duration is 30 days.

To update idle session duration:

1. Go to Atlassian Administration. Select your organization if you have more than one.

2. Select Security, then select User security, and then select External users.

3. Select Edit for the policy you want to modify.

4. On the Settings page, select length of time for Idle session duration.

After step 2, I cannot find Edit button, and just saw "Guard warning"

Does this service need a charge after 30 days free trial?

[Dave Mathijs · Accepted solution]

Hi @Aidan Chiu This feature is only available when you have Atlassian Guard installed. It won't work after the 30-day trial period if you haven't submitted your payment details.

[Gabriela - LeanZero]

@Aidan Chiu, Dave's right about the external user policy. Your own managed accounts are a separate path though, and that one isn't gated: idle session duration is included by default in an authentication policy. Same menu, one item above External users. Security > User security > Authentication policies, Edit, then Settings. Without Guard you get the single default policy, so whatever you set there applies to everyone.

Update idle session duration

[fargosan]

This would be a valuable security feature, especially for organizations handling sensitive data. Automatically logging out inactive users or allowing configurable session timeouts can help reduce unauthorized access, improve compliance, and strengthen overall account security. Great feature suggestion!

[Aidan Chiu]