Advertising sustains the DA. Ads are hidden for members. Join today

Security in Drupal

Session management

Last updated on
7 November 2025

This documentation needs review. See "Help improve this page" in the sidebar.

Drupal user access and identification is based on sessions. These modules help you configure how long, how many, or/and on what pages the login is remembered.

  • Session Limit: Session Limit allows administrators to limit the number of simultaneous sessions per user. The maximum number of sessions is configurable. By default, a session is created for each browser that a user uses to log in. This module will force the user to log out any extra sessions after they exceed the administrator-defined maximum. The user is able to select which sessions should be removed
  • Auto Log Out: This module provides a site administrator the ability to log users out after a specified time of inactivity. It is highly customizable and includes "site policies" by role to enforce logout.
  • Persistent Login: The Persistent Login module provides the familiar "Remember Me" option in the user login form. The administrator can control how long user logins are remembered, how many different persistent logins are remembered per user, and which pages a remembered user can or cannot access without explicitly logging in with a username and password (e.g. you cannot edit your account or change your password with just a persistent login).
  • User Session Management and Monitoring: It is a powerful module that has functionality like automatic (forced) logout after a period of inactivity or a session duration. You can control the number of concurrent sessions a user can have. It also comes with a dashboard wherein the users can see all the active sessions and terminate the ones they don’t recognize; and the admins can see the users that are logged in, with the power to terminate any session. 
    The only caveat with this module is that it is not a contributed module, but is rather offered by miniOrange, a company specializing in Identity and Access Management. This module may require a paid subscription to unlock all the features.
     

Help improve this page

Page status: Needs review

You can: