locked
Automatic Logout RRS feed

  • Question

  • Hello Community,

    Quick question. Does anyone happen to know how to achieve an automatic window closure and/or automatic logout after a specific time on CRM OnPremises? Similar to CRM Online that will log me out after a certain time, can I do something similar for OnPremises?

    Thanks a lot,
    Manuel 


    maltermatt@syndeo.mx
    Wednesday, June 22, 2011 5:29 PM

Answers

  • Hi,

    If you are using CRM OnPremises with Active Directory deployment then there is no as such automatic logout functionality available because it works with active directory, so in this case you might have to control user inactive widnows login session through Active Directory domain policies but if you are using IFD OnPremises deployment then it has an auto logout time limit.


    Jehanzeb Javeed

    http://worldofdynamics.blogspot.com
    Linked-In Profile |CodePlex Profile

    If you find this post helpful then please "Vote as Helpful" and "Mark As Answer".
    Wednesday, June 22, 2011 5:40 PM
  • Jehanzeb, thanks so much!
    maltermatt@syndeo.mx
    Wednesday, June 22, 2011 11:10 PM

All replies

  • If 2011 use IFD and then use

    Claims-based authentication and security token expiration

    The lifetime of a default security token for a claims-based authentication deployment using AD FS 2.0 is 60 minutes. By default, Microsoft Dynamics CRM Server 2011 is configured to display the Authentication is Required dialog box 20 minutes before the token expires.

    In theAuthentication is Required dialog box, if you clickCancel, the token expires as indicated. When the security token expires, you will need to start a new browser session to Microsoft Dynamics CRM to access your data. Any unsaved changes will be lost.

    In theAuthentication is Required dialog box, if you clickSign In, the Sign-Out page appears. When you close theSign-Out page, one of the following occurs:

    · If you have not deployed an Internet-facing deployment (IFD), you will automatically re-authenticate with domain credentials and a new security token will be issued.

    · If you have an IFD deployment, you will be required to re-authenticate by entering your credentials on the login page.

    By using Windows PowerShell, you can change theTokenLifetime property for the relying party objects that you created from 60 minutes to a longer period, such as 480 minutes (8 hours):

    1. Open a Windows PowerShell prompt.

    2. Add the Microsoft Dynamics CRM Windows PowerShell snap-in:

    PS > Add-PSSnapin Microsoft.Adfs.PowerShell

    3. Configure the relying party token lifetime:

    PS >Get-ADFSRelyingPartyTrust -Name:"relying_party"
    PS > Set-ADFSRelyingPartyTrust -TokenLifetime 480

    where:

    4 relying_partyis the name of the relying party that you created.


    Carsten Groth http://carstengroth.wordpress.com
    Wednesday, June 22, 2011 5:38 PM
  • Hi,

    If you are using CRM OnPremises with Active Directory deployment then there is no as such automatic logout functionality available because it works with active directory, so in this case you might have to control user inactive widnows login session through Active Directory domain policies but if you are using IFD OnPremises deployment then it has an auto logout time limit.


    Jehanzeb Javeed

    http://worldofdynamics.blogspot.com
    Linked-In Profile |CodePlex Profile

    If you find this post helpful then please "Vote as Helpful" and "Mark As Answer".
    Wednesday, June 22, 2011 5:40 PM
  • Carsten, thanks so much! Great answer.
    maltermatt@syndeo.mx
    Wednesday, June 22, 2011 11:10 PM
  • Jehanzeb, thanks so much!
    maltermatt@syndeo.mx
    Wednesday, June 22, 2011 11:10 PM