Skip to main content
The platform automatically logs users off after a configurable period of inactivity. The default session timeout is set between 15 to 30 minutes (configurable based on organizational policy).
The platform automatically logs users off after a configurable period of inactivity. The default session timeout is set between 15 to 30 minutes (configurable based on organizational policy). All user sessions are token-based and time-bound; sessions are forced to re-authenticate after the maximum session lifetime even if activity is ongoing. Learn more: Xoxoday Loyalife Help Centre

Does Loyalife lock accounts after failed login attempts?

Xoxoday Loyalife automatically locks user accounts after consecutive failed login attempts, protecting your organisation against brute-force attacks…

The system is capable of identifying conflicts in access privileges

The RBAC engine can identify and flag conflicting privilege assignments (e.g., a user assigned both maker and checker roles on the same transaction…