Session Idle Timeout, Admin console auth token lifetime, and Auth Token Lifetime are advance features that are configured in either a COS and changed for individual accounts.
The administration console auth token lifetime sets a browser cookie that contains the admin auth token. Administrators can open the administration console without having to log on again until the auth token expires. The default is 12 hours.
When a user logs on to the Zimbra Web Client and checks "remember me" on the log on page, the Auth Token Lifetime feature sets a browser cookie that contains the auth token. The user can open the Zimbra Web Client without having to log on again until the auth token expires. A lifetime can be measured in days, hours, minutes, or seconds. The default is 2 days.
The Session Idle Timeout determines how long a user session remains active if there is no activity on the Zimbra Web Client. Activity includes any clickable mouse action such as viewing the contents of a folder or clicking a command button. When there is no activity within the configured time, the user is logged out of the Zimbra Web Client. The default is unlimited.
Setting limits for auth token lifetime and session idle timeout limits the exposure of a user's information on shared computers. When a session times out, the auth token automatically expires.
You can select an account and click Invalidate Sessions to manually expire a user's session. The user is immediately logged out of the web client. If the user is logged in, the user sees the login page with a notice that the session has expired.
Go to either Configure>Class of Service or to Manage>Accounts.
Select the COS or individual account and in the gear icon, select Edit.
In the Navigation pane, click Advanced.
In the Timeout Policy section modify the timeout policies.
Click Save.
-------------------------------------------------------------------------------------------------------
Copyright @ 2005-2017 Synacor, Inc. All rights reserved. "Zimbra" is a registered trademark of Synacor, Inc.