spec 2 linked patterns checked
NIST SP 800-63B Session Management
Documents session inactivity timeout, overall timeout, termination, reauthentication reset behavior, and assurance-level session management requirements.
Read with a purpose
What this source can teach
Use this source to check a technical or accessibility requirement against its exact wording and scope.
- Start with the original. Open the source and find the guidance or example relevant to your task.
- Trace the connection. Use the claim notes below to see how this site applies the source to specific patterns.
- Check the setting. Compare the source's platform, people, and constraints with your own decision.
Pattern Decisions This Source Supports
| Pattern | Supported decision | Required contract | Claim note |
|---|---|---|---|
| Session timeout | Choose session timeout when the authenticated session has already expired or been terminated and the next valid path is sign-in, reauthentication, restart, or safe task restoration. | The timeout state is driven by server or identity-provider session validity, not by a cosmetic client-only overlay. | Supports inactivity timeout, overall timeout, termination, and reauthentication reset behavior. |
| Session timeout warning | Choose session timeout warning when the session is approaching an inactivity, absolute, device-lock, or reauthentication boundary that can interrupt authenticated work. | The warning is driven by the authoritative session or identity state, not only a local countdown. | NIST documents inactivity timeout, overall timeout, and reauthentication reset behavior. |
Comparisons supported by this source
- Session timeout vs session timeout warning vs sign in vs permission denied state vs autosave recovery
Supports inactivity timeout, overall timeout, termination, and reauthentication reset behavior.
- Session timeout warning vs exit warning vs autosave form vs permission denied state
NIST documents inactivity timeout, overall timeout, and reauthentication reset behavior.
Evidence Role
This source is treated as spec evidence. Its value comes from the specific claims and setting described above.
Publisher: National Institute of Standards and Technology. Last checked: .