Session Management

Manage active sessions, auto-logout, site banners, and password settings.

This guide covers security and UX features: session monitoring, automatic logout, banner messages, and password requirements.

Active Users Dashboard

Monitor who is currently online.

Staff sessions: Admin → Maintenance → Active Sessions

  • View all logged-in staff members
  • See last activity time and IP address
  • Filter by active in last 15 min or 1 hour

Public visitors: Admin → Maintenance → Public Activities

  • Track visitors on public pages (brief public, talent availability, login)

Auto-Logout After Inactivity

Staff members who are inactive for more than 60 minutes are automatically logged out. The idle timer resets on every page load, form submission, or HTMX request.

Site Banners

ITCFlow supports two independent banner messages:

Banner typeWhere shown
Site BannerAll pages visible to logged-in staff
Public BannerPublic pages (login, brief public, talent availability)

Managing a banner:

  1. Go to the relevant Admin path
  2. Add a new banner with a message (HTML supported)
  3. Set Is active to display the banner
  4. Visitors can dismiss the banner — it won’t reappear unless the message changes

Password Change

Staff can change their own password from the sidebar lock icon.

Password requirements:

  • Minimum 12 characters
  • At least one uppercase letter
  • At least one lowercase letter
  • At least one digit
  • At least one special character