Who sets session timeout?

Session policy should follow the buyer IdP and the LMS admin setting agreed in the security questionnaire. Do not leave it as a vendor default.

Educational and evidentiary material for procurement and IT evaluators. Adapt with your legal, privacy, and information-security counsel. Commercial terms, SLAs, and certificate serials are confirmed in the bid — not invented on this page.