This topic describes the validity periods of logon sessions in which you log on to the CloudSSO user portal and access an account in your resource directory.
Validity period of a logon session in which you log on to the CloudSSO user portal
The validity period of a logon session in which you log on to the CloudSSO user portal is 8 hours. If a logon session expires, you must log on to the CloudSSO user portal again. The validity period of this logon session cannot be modified.
Validity period of a logon session in which you access an account in your resource directory
After you log on to the CloudSSO user portal, you can access an account in your resource directory as a Resource Access Management (RAM) role or a RAM user.
Validity period of a logon session in which you access an account in your resource directory as a RAM role
The validity period of this logon session is specified by the Session Duration parameter in an access configuration of CloudSSO and the Logon Session Validity Period parameter in the security settings of RAM users. The smaller value prevails.
The following figure shows the details page of an access configuration. The Session Duration parameter is displayed in the Basic Information section. You can click Edit to modify this parameter. For more information, see Modify the basic information about an access configuration.
The following figure shows the security settings of RAM users. The Logon Session Validity Period parameter is displayed in the RAM User Security section of the Security Settings tab. You can click Modify RAM User Security Settings to modify this parameter. For more information, see Manage security settings of RAM users.
Validity period of a logon session in which you access an account in your resource directory as a RAM user
The validity period of this logon session is specified by the Logon Session Validity Period parameter in the security settings of RAM users.
The following figure shows the security settings of RAM users. You can click Modify RAM User Security Settings to modify this parameter. For more information, see Manage security settings of RAM users.
Usage notes
A new session is generated each time you access an account in your resource directory from the CloudSSO user portal. If the logon session in which you log on to the CloudSSO user portal expires, the validity period of the logon session in which you access an account in your resource directory is not affected.
If the logon session in which you access an account in your resource directory expires within the validity period of the logon session in which you log on to the CloudSSO user portal, you can access the account in your resource directory again from the CloudSSO user portal.
The validity period of a logon session is not affected regardless of whether you perform operations in the console. You must log on again after a logon session expires.
Elastic Compute Service (ECS)
Lingma
