---
title: "Configure Session Timeout Settings"
slug: "configure-session-timeout-settings"
updated: 2026-09-09T16:09:29Z
published: 2026-09-09T16:09:29Z
canonical: "docs.redcanary.com/configure-session-timeout-settings"
---

> ## Documentation Index
> Fetch the complete documentation index at: https://docs.redcanary.com/llms.txt
> Use this file to discover all available pages before exploring further.

# Configure Session Timeout Settings

You can configure two global session timeout settings that apply to all users in your organization:

- Session inactivity timeout
  - This setting determines how long a user can be inactive before they are automatically logged out.
  - Default**:** 30 minutes
  - Note**:** You can make this timeout shorter for stricter security, but you cannot extend it beyond 30 minutes.
- Multi-Factor Authentication (MFA) re-authentication period
  - This setting defines how often users must re-verify their identity using SMS-based MFA.
  - Default: 7 days (10,080 minutes)

To change these default settings:

1. Click your user icon at the top right of the Zscaler MDR portal, then click **General Settings**. ![](https://cdn.document360.io/75147bee-bf0d-444c-8afb-6e83b11ec0ef/Images/Documentation/useradminsessiontimeout-1_01.png?sv=2026-02-06&spr=https&st=2026-11-03T11%3A33%3A10Z&se=2026-11-03T12%3A33%3A10Z&sr=c&sp=r&sig=%2FmM66DSVdu3MlnHzXhcXXaeidx3YI6WScw5kn5cMOK0%3D)
2. Enter the desired values and click **Save**. ![](https://cdn.document360.io/75147bee-bf0d-444c-8afb-6e83b11ec0ef/Images/Documentation/useradminsessiontimeout-1_02.png?sv=2026-02-06&spr=https&st=2026-11-03T11%3A33%3A10Z&se=2026-11-03T12%3A33%3A10Z&sr=c&sp=r&sig=%2FmM66DSVdu3MlnHzXhcXXaeidx3YI6WScw5kn5cMOK0%3D)