Skip to main content
Session timeout is enforced to mitigate unauthorized access from unattended sessions. By default, the platform logs out inactive users after 15 to 30 minutes of inactivity, configurable per organizational policy.
Session timeout is enforced to mitigate unauthorized access from unattended sessions. By default, the platform logs out inactive users after 15 to 30 minutes of inactivity, configurable per organizational policy. Sessions are token-based and time-bound; even active sessions are forced to re-authenticate after a maximum duration (e.g. 8 or 12 hours), configurable via the backend. After automatic logout, users are prompted to re-authenticate via credentials or the configured SSO flow. Learn more: Empuls Help Centre

Does Empuls Restrict Concurrent User Sessions?

Empuls enforces single-session access per user, automatically terminates idle sessions, and disables concurrent logins across all applications.

Does Xoxoday Empuls support two-factor authentication?

Yes. Xoxoday Empuls supports 2FA via OTP, Google Authenticator, Microsoft Authenticator, and SSO with enforced MFA to protect employee accounts.