Sessions and Security

Use this topic to learn how sessions work in your Trumba account, how long they last, and how to view session information.

Topic links

• What is a session
• How are sessions created and deactivated
• How long are default sessions
• How to customize sessions
• How to view session information
• What information about a session is viewable
• Session expiring notifications
• User Sessions report

What is a session

Each time a user logs into Trumba, a session is created. Session information is stored and is configurable by customer account.

How are sessions created and deactivated

A session is created when a user signs into Trumba as a user (publisher or editor) or an event organizer.

Sessions can be deactivated in the following ways:

• Sessions are retired when the user signs out.
• Sessions are expired when the session has reached its expiration date/time.
• Sessions can be manually retired (signed out) from the Account Settings session list.
• If a user changes their password, all current sessions will be signed out.

Note Users will be notified 5 minutes prior to the session expiration time and are given the opportunity to sign in and continue working without interruption.

How long are default sessions

Default session durations vary by user type:

• Trumba Users (publisher/editor)
  • Remember Me checked: 7 days
  • Remember Me unchecked: 12 hours
• Organizers: 12 hours
• For administrators only, Impersonated: Same expiration date/time as the administrator account expiration date/time

How to customize sessions

On the Customer Information page, administrators can configure session settings:

• Allow Remember Me: If you want your users to be able to have 7 day sessions (rather than 12 hour sessions), select Yes.

Note If you select No for Allow Remember Me, the Remember Me checkbox selection will be ignored.

How to view session information

The Account Settings page shows the sessions for an individual account.

Administrators can run the User Sessions report. This report shows all user sessions used within the customer account and can be run with a variety of criteria.

What information about a session is viewable

The information available depends on your account type (Publisher/Editor, Administrator).

All users

On the Account Settings page, users can view the following session information:

• Session ID: Unique session number
• Sign In Method: Password, SSO, Google, Microsoft, or Facebook
• Status: Active, Retired, or Expired
• Created: Time and date the session was created
• Last Access: Last time an action was taken
• Expires: Date and time the session will expire
• IP Address: The IP address of the login
• Client: The browser, version, and operating system used to sign in

If you notice that a session is Active that you believe is suspect, you can sign it out manually.

To sign out a session:

1. On the Account Settings page, click the arrow next to the Active status.
2. Select Sign Out.

Administrators

Administrators can view additional information about their sessions on the Account Settings page. To view sessions for individual users, use the Edit option from the Accounts page on the Settings menu. In addition, administrators can view all sessions within in the customer account using the User Sessions report.

On the Account Settings page, administrators can view the following session information:

• Session ID: Unique session number
• Sign In Method: Password, SSO, Google, Microsoft, or Facebook
• Status
  • Active: Session is active
  • Retired: Session was signed out by user
  • Expired: Session timed out
• Created: Time and date the session was created
• Last Access: Last time an action was taken
• Access Count: Number of actions taken
• Expires: Date and time the session will expire
• IP Address: The IP address of the login (Trumba and Impersonated only)
• Client: The browser, version, and operating system used to sign in

Session expiring notifications

Users will receive a notification when their session is going to expire in 5 minutes. The notification gives the user the opportunity to sign in and continue working without interruption.

If you close the window before the expiration time, it will appear again in one minute.

Click the Sign in button to continue working; the notification window closes and a new session is created.

If the session expires, enter your email and password if needed, then click Sign in to continue working.

User Sessions report

The User Sessions report is available to customers that are designated as account administrators.

The report shows all of the sessions within the customer account. This report also allows an administrator to sign sessions out if needed.

To run the User Sessions report:

1. On the top of your page in your Trumba editing environment, click Reports.
2. Under Customer Admin, click User Sessions.
3. Select the criteria you would like to use for the report and click Run Report.

On the report, you can view additional information about sessions:

• Session Type
  • Trumba: Trumba user
  • Organizer: Organizer for an event
  • Impersonated: Administrator impersonating another user within their account
• Email Address The email address associated with the account.

Note Click on the email address to view all sessions for the user.

• Imp Email Address If users have been impersonated, this is the email address of the impersonsator.
• Imp Session ID If users have been impersonated, this is the session ID of the impersonator.

Click on the arrow next to the Active status for a session and select Sign Out to manually sign out a session.

As with other reports, you can view in Compact mode, Print, Export, and Search the report. After running the report, you can also filter using columnn values and change the sort order by clicking the column name.