robotsnoindex

A user’s session duration is the amount of time the user stays logged in before we log them out and they have to log back in.

The amount of time it takes for users to get logged out varies by the Atlassian cloud product.

Product

Session duration

Jira

30 days after being idle. Or you can update the Idle session duration (see below) for managed accounts.

Confluence

30 days after being idle. Or you can update the Idle session duration (see below) for managed accounts.

Bitbucket

30 days after being idle. Or you can update the Idle session duration (see below) for managed accounts.

Trello

(Without an Atlassian account) None. Users stay logged in until they log out.

(With an Atlassian account) 30 days after being idle. Or you can update the Idle session duration (see below) for managed accounts.

Statuspage

3 days after being idle.

Opsgenie

4 hours after logging in. If users select Remember me when they log in, they’re session duration will be 14 days + 4 hours after logging in.

A session is idle when users don’t interact with the product during that period of time. Interactions can be active (a user clicks a button) or passive (an open page auto refreshes).

For more control over users logging in to Jira, Confluence, and Bitbucket, you can specify the idle session duration for those products. This setting only applies to your managed accounts. This setting doesn't apply to:

  • Accounts your organization doesn’t manage
  • Mobile sessions

Before you can update the session duration, verify one or more domains. When you verify a domain, all the Atlassian accounts that use email addresses from the domain become managed by your organization. See Verify a domain for your organization.

To update idle session duration:

  1. From your organization at admin.atlassian.com, click Security > Session duration.

  2. From the Idle session duration dropdown, select the amount of time you want.

    If you select a duration of 24 hours or less, we recommend letting your users know how often they’ll be logged out. A short length of time may impact their workflow.

  3. Click Update to save.

When you save changes to the session duration, users don’t get logged out of their accounts. The new idle session duration will apply the next time a user logs in.

Session duration in authentication policies

Authentication policies give you the flexibility to configure multiple security levels for different user sets within your organization. Authentication policies also reduce risk by giving you the ability to test different configurations for subsets of users before rolling them out to your whole company.

To select an idle session duration from an authentication policy:

  1. Navigate to Authentication Policies at admin.atlassian.com.

  2. Select Edit for the policy you want to modify.

  3. On the Settings page, select length of time for Idle Session Duration.