2
votes
2answers
128 views

Logout after password change?

What is the convention regarding the following scenario: In a given system, a user is already logged in. He perform some tasks and then he change his own password. After this point, what should ...
2
votes
1answer
197 views

Why are those Sign-in/sign-out icon a convention?

I've been recently implementing a custom icon-font & I decided to use those icons for Sign-in/sign-out: My only real reason being that choice is that it seems to be a convention in all major ...
2
votes
1answer
249 views

How should a user exit an intranet web app with automatic login?

We have an administration tool which is a installed locally on a server and accessed through a browser with automatic log in using AD. When the user navigates to the page, they are automatically ...
4
votes
1answer
230 views

What are best practices when setting session expiration for a site's login?

We recently did a survey for our website, and one of the main complaints we received is that our customers are getting logged out and need to log back in. We have a 15 minute expiration set currently ...
11
votes
1answer
337 views

What should happen if the login page is accessed post-login?

I have a normal web-app (website) with login and logout links. The logout link only appears if the user is logged-in and vice versa. However, there is nothing preventing the user from manually ...