Persistent Spotfire sessions
A user session is considered "persistent" when the server retains the user's successful login after the user has stopped working or closed the program. This makes it possible for the user to reopen Spotfire and continue working without logging in again.
Note: The "persistent
sessions" feature applies only to username/password authentication.
Persistent sessions can create a security risk. Spotfire provides
several ways to control or remove this session information from the server.
- In the Spotfire Server web administration pages, on a user's Profile page, you can invalidate any current persistent sessions for the selected user. For instructions on accessing this page, see Changing a user's name, password, or email.
- You can use the invalidate-persistent-sessions command to invalidate persistent sessions for all users, or for a specified user.
- You can use the config-persistent-sessions command to set how persistent sessions work for web-based users in your environment, or to disable the feature.
- You can use the config-login-dialog command to set how persistent sessions work for users who log in to Spotfire Analyst.