Session Timeouts

Xactly Incent and Xactly Modeling checks for user inactivity and, after a certain period (set using the SESSION_TIMEOUT preference in the Setup > Preferences area), terminates the session. If this happens, the user will need to log in again to access the application.

Session timeouts are an important security measure that helps prevent an attacker trying to steal and use an existing user session. For this reason, it is a best practice to set the session timeout to the shortest value possible, depending on your business needs in the context of using Xactly Incent or Xactly Modeling.

note: Incent and Modeling resets the session timer only after a call to the Xactly Server. The session timer does not reset in cases when user interaction does not result in a call to the Xactly Server.