Staying logged in across browser shutdowns

[chris.p]

Hi there
We're running Sugar CRM 5.2.0h (Build 5744) (the standard Windows install using Apache), and I'm trying to change things so that users may stay logged in across browser restarts.

Currently, Sugar doesn't make you log in if you open a new tab or a new window while existing browsers are open. If you close your browser entirely though, you must log back in again on your next visit.

Is there a way to adjust this? (I'm assuming this has to do with the PHPSESSID set to expire at session end, but couldn't figure out how to change that either.)

Thanks

[eggsurplus]

This is the way it should be for any app which is why it's a browser issue here. If it restored sessions it would be a huge security risk. If I could access your machine I'd be able to have access to any app you were logged into before closing your browser such as your online bank account, webmail, etc.

The solution is to have them not close their browser all the time if that's what they are doing. If they wish to not log in all the time they could also just use the browser's saved password feature.

[chris.p]

*sigh*
That's my personal opinion also, which is not shared. The main issue with this is that we have Sugar search boxes for company/contact name on our intranet homepage, meaning that searches often just end up at the login page, losing the search text.
I think wasting the effort of making sure to spell someone's name right is the sticking point.

For this at least, security is outweighed by the convenience factor.

[eggsurplus]

If you're coming from another site like an intranet website you may want to look into a Single Sign-On solution. This would make it so that the user coming from the intranet site after a search would automatically be logged into Sugar. There are a good number of SSO solutions out there with CAS being one of them. There are some posts on the forums here with out to integrate some SSO solutions with Sugar that should be helpful if you go that route.