Introduction
Ledgy allows Enterprise customers to customise the session length (authentication token duration) for their company. This gives your infosec team control over how long users stay logged in before they need to re-authenticate, helping you meet your organisation's internal security requirements.
This article explains how to access and configure session length settings for your company.
Note: Customisable session length is only available to customers on the Enterprise plan.
What is session length?
Session length determines how long a user's login session remains active before they are required to log in again. By default, Ledgy uses standard session durations. With this feature, Enterprise customers can reduce or adjust the session length to align with their organisation's security policies.
This is particularly useful for:
Meeting compliance requirements — Many organisations have internal policies that mandate shorter session durations
Enhancing security — Shorter sessions reduce the risk of unauthorised access from unattended devices
Aligning with industry standards — Infosec teams can configure session lengths that match their security framework
How to customise session length
To configure the session length for your company:
Navigate to Company Settings
Go to the Security section
Locate the Session length settings
Select your preferred session duration from the available options
Click Save to apply the changes
Important: Changes to the session length will apply to all users in your company. Existing sessions will not be affected — the new session length will take effect the next time a user logs in.
Who can change this setting?
Only Enterprise company collaborators who have permission to update SSO settings can modify the session length configuration. If you don't see this option, please check that:
Your company is on the Enterprise plan
You have the appropriate collaborator permissions to manage security settings
FAQs
What is the default session length?
The default session length remains unchanged for all customers. Enterprise customers can choose to manually set their preferred values if the default does not meet their security requirements.
Will changing the session length log out currently active users?
No, changing the session length will not affect existing active sessions. The new session length will apply the next time a user logs in or when their current session expires.
Does this work with SSO?
Yes, the session length setting works alongside your existing authentication setup, including SSO and 2FA configurations.
Is there a minimum or maximum session length I can set?
Please refer to the available options in the session length settings within Company Settings. The available durations are designed to balance security and usability.
Have questions or need help configuring session length? Contact us at [email protected].