Skip to content

Sessions

A session starts when you sign in and ends when you sign out, when the session lifetime configured for the workspace passes, or when the session cookie is removed.

When the session expires

If the session expires while you are working, the next click or page reload takes you to the new two-step sign-in — never to a legacy screen and never to a blank page.

The sign-in address keeps the page you were on, so after signing in again you return to the same case or tray instead of the Home area. The username is pre-filled when the system still knows who you are.

You should not be asked for the password twice in a row: if signing in returns you to the sign-in screen, that is a defect — report it with the address you used.

Return addresses are restricted

The sign-in accepts a return address only when it points inside the application:

Return address Behaviour
An internal page you copied from the address bar You land on that page after signing in
An external site (https://… or //… from another host) Ignored; you land on your usual start page
A javascript: or similar pseudo-address Ignored; no dialog or script runs
The sign-in page itself Ignored, so there is no redirect loop

You always end up inside Lurana BPM after a successful sign-in.

Signing out

Sign out from the account menu in the top bar. Signing out closes the session on the server and returns you to the sign-in page. Signing out in one tab ends the session for the workspace in that browser.