CloudSSO session duration for user portal and member accounts-CloudSSO(CloudSSO)-阿里云帮助中心

CloudSSO user portal session duration

The CloudSSO user portal session duration is 8 hours and cannot be modified. You must sign in again after the session expires.

Resource directory account session duration

After you sign in to the CloudSSO user portal, you can access a resource directory account as a Resource Access Management (RAM) role or a RAM user.

Sign in by assuming a RAM role

The session duration is the minimum value of two settings: the Session Duration in the CloudSSO access configuration and the Logon Session Validity Period in the RAM user security settings.

CloudSSO administrators click Edit to modify the Session Duration in the access configuration. Valid range: 900–43,200 seconds. Default: 3,600 seconds.

Modify the basic information about an access configuration.
RAM administrators click Modify RAM User Security Settings to change the Logon Session Validity Period in the RAM user security settings. Valid range: 1–24 hours. Default: 6 hours.

Manage security settings of RAM users.

Sign in as a RAM user

The session duration is the minimum value of two settings: the Session Duration in the RAM user synchronization configuration and the Logon Session Validity Period in the RAM user security settings.

CloudSSO administrators click Edit to modify the Session Duration in the RAM user synchronization configuration. Valid range: 1–24 hours. Default: 6 hours.
RAM administrators click Modify RAM User Security Settings to change the Logon Session Validity Period in the RAM user security settings. Valid range: 1–24 hours. Default: 6 hours.

Manage security settings of RAM users.

Usage notes

Each access to a resource directory account from the CloudSSO user portal creates a new session. An expired user portal session does not affect active resource directory account sessions.
If a resource directory account session expires while your user portal session is still valid, you can access the account again from the user portal.
Session duration is not extended by console activity. You must sign in again after a session expires.

References

Log on to the CloudSSO user portal and access Alibaba Cloud resources