How to set an inactivity timeout for sessions in ES?

Problem

How can an inactivity timeout be set so that a user or session is disconnected after a specified period of inactivity?

Resolution

By default the relevant timeouts are set to 0 (zero) and there is no timeout - sessions will continue to remain connected.

When External Security is in use, the parameter that controls the inactivity timeout is: "microfocus-MFDS-User-MTO-Timeout" in a microfocus LDAP user record.

Any positive value set for this attribute will set the number of minutes of inactivity before this user/session is disconnected.

If the value in this record is 0 (zero) then any timeout will be determined by the settings in the region.

Within a region it is the 'ID timeout' setting that can be set to specify (at a system level) how many seconds of inactivity there are before the session will be disconnected.

The allowed values are from 0-255 (4.25 hours)

The 'ID timeout' value can be set either in the SIT or in ESMAC (-> control page)
These values will have an effect only if microfocus-MFDS-User-MTO-Timeout=0 for the relevant user.

There are also some special values that microfocus-MFDS-User-MTO-Timeout can be set to, as follows:

Additional notes

The limit of the ID Timeout that can be set in a region is 255 minutes.
The absolute maximum value that can be set for the microfocus-MFDS-User-MTO-Timeout is 960 minutes (16 hours). However there is currently a restriction on values above 600 being used (in ED2.3u1) as these higher values can cause the timeout to occur after only 1 minute, so should be avoided for the time being.