Signing out from bitdefender forum

Rock.87

To enhance security, signing out of the Bitdefender forum should immediately log the user out of all connected services. Additionally, a system should be in place to automatically log out users who have been inactive for a specified duration ( time should be configurable )

Alexandru_BD

Hi @Rock.87,

When it comes to the forum account, logging the user out from all connected devices is not possible, since each browser has it's own unique session data which are not connected to one another. We're also using OAuth2 SSO, so this is not something feasible to do in this scenario.

As for the second suggestion, the forum does have a 'Session Timeout' feature included in its security settings, and its use and configuration is at the discretion of the admins. Currently, if a logged member does not visit the site within the preset time period, they will be automatically signed out. However, this session timeout is not set very short, because we have active members who wish to stay logged in for a longer period of time and expressed their desire to do so, thus shortening this timeout would create certain inconveniences.

If you ask me, I think a good practice is to manually log out of apps/sites that you don't use frequently, from all devices you're logged in to, and this shouldn't be too hard to do. 🙂

Thanks