System Settings: Security Tab

FlexNet Manager Suite 2024 R1 (On-Premises)

The Security tab on the System Settings page enables you to specify global security settings. This page divides the security settings into the following sections:

• Documents
• Session timeout.

Documents

This section contains global settings to control which types of attachment methods are allowed across the web interface of FlexNet Manager Suite. The fields associated with these settings will appear or disappear in the web interface throughout the web interface, based on the settings you specify here. You may choose any combination of the following options:

• Document upload — Select this check box to allow documents to be uploaded in any locations where files can be attached in the web interface of FlexNet Manager Suite. Uploaded documents are saved in the central compliance database.
• File location — Select this check box to allow for text fields where operators can enter a file path location (such as a network share). The file is not uploaded, and only this reference to its location is saved.
• URL — Select this check box to allow for text fields where operators can enter a URL hyperlink to a location elsewhere, either on your corporate intranet or the public Internet, as appropriate.
  Tip: When an operator enters a URL in a field resulting from this setting (for example, in the Documents tab of license or contract properties), a modal dialog appears asking whether the operator wishes to continue with the redirect. The URL is provided in a read-only text field in the modal dialog, allowing the operator to safely copy and paste the URL to check accuracy before confirming the URL redirection.

Session timeout

Note: The Session timeout setting is visible only when you have single sign-on configured to use Google OAuth 2.0. For more information, see the Authentication chapter of the FlexNet Manager Suite System Reference PDF, available at https://docs.flexera.com/.

When applicable, the Session timeout setting specifies the maximum period of inactivity for which each operator in your enterprise can remain logged into the web interface of FlexNet Manager Suite. This is a "sliding expiration": when an operator performs any operation that interacts with the central application server (such as saving data, moving to a new page, or searching), the timeout period is reset for that operator, and starts counting down again. It is not required that the activity occur on a single browser tab or window: the operator may use several tabs or separate windows in the same browser, and server interactions on any one restarts the count down.

This is a single time limit for all operators in your enterprise (although, of course, the countdown runs separately for each operator's web browser).

1. Choose a setting for your enterprise from the Timeout period options list:
   • 12 hours (the default)
   • 4 hours
   • 1 hour
   • 30 minutes.
2. Click Save (on the right side).

The timeout works by setting a cookie which stops the application server issuing a new request to log in. This means that a new login is required on the first attempt to access any web interface page after any of the following events:

• The timeout period expires
• Cookies are cleared on the web browser
• The operator logs out
• The operator switches to a different web browser or computing device.

Since the cookie's countdown value is set as the operator logs in, any change to this value only reaches an operator after one of the above events, when the operator has to log in again. A change in the setting doesn't affect any sessions already running before the change was saved: these continue with their previous timeout values until one of the above listed conditions occurs.