In this article you will learn :
- Why do I, as a Sherpany user, need to provide the password or second factor after I’ve logged in to Sherpany
- How often Sherpany users need to re-enter their authentication credentials
Why providing the password or second factor once I have logged in
Sherpany treats security of your data very seriously so we require additional security factors not only for your login but also periodically checks if your credentials are still valid and not compromised. As banking applications (or any other application which requires a high security level) there are several different checks we are required to perform periodically:
- Inactivity check to ensure that someone unauthorized didn’t get access to your Sherpany data while your computer is not in use by you for longer periods of time
- Second factor check and full authentication check is to ensure that your credentials are not compromised and the person in front of the screen is still you
- Passcode check (iOS, Android and Windows applications) is to prevent unauthorized access to your Sherpany data if someone gets access to your device
How often Sherpany users need to re-enter their authentication credentials?
The table below explains how often Sherpany’s users need to provide their authentication credentials as a part of security checks.
| Checks | Web | Android | iOS | Windows |
| Inactivity check | After 30 min of inactivity* | NA | NA | NA |
| Full authentication check | After 12 hours | After 4 weeks (12 h with SSO) | After 4 weeks (12 h with SSO) | After 4 weeks (12 h with SSO) |
| Second Factor check | After 6 hours | After 6 hours | After 6 hours | After 6 hours |
| Passcode check | NA | After app has been locked or closed (by user or device OS) or after 15 min of inactivity | After app has been locked or closed (by user or device OS) or after 15 min of inactivity | After app has been locked or closed (by user or device OS) or after 15 min of inactivity |
*About the Inactivity check:
After this time you will get logged out automatically
5 min before you will get logged out Sherpany shows banner and allows you to extend your session
Inactivity check timeout is configurable - please contact your Room administrator or Sherpany CSM if you want to extend your Inactivity check timeout