Every idle session, closed before it becomes a liability.

Per-group and per-user timeout policies with a warned, save-safe grace period, cross-tab synchronization, and audit-grade logging — the compliance-ready idle logout Odoo does not ship natively.

The problem

Shared and unattended workstations leave Odoo sessions open long after an employee walks away, and compliance regimes like GDPR, HIPAA, PCI-DSS, SOC 2, and ISO 27001 increasingly require proof of automatic idle logout. Odoo's native timeout is a single blunt global setting with no per-group policy, no warning before logout, no cross-tab coordination, and no audit trail — leaving a real security gap and nothing to show an auditor.

The solution

Activity Session Timeout gives administrators a dedicated configuration panel with named presets, per-group and per-user policies with precedence rules, and a preview of exactly who a change affects. Users get a non-blocking countdown toast and a grace period to save before every open tab locks together, with an append-only audit log and metrics dashboard as evidence the control is enforced.

Capabilities

Everything a compliance-ready idle logout needs

Every capability below is implemented in the module.

01

Per-Group & Per-User Policies

Set a default idle timeout, then override it by user group or individual user. Policies resolve by precedence — the most restrictive applicable rule wins over the global default.

02

Warned, Save-Safe Logout

A configurable 30-60 second countdown gives users time to save before the session locks, and a grace period lets them resume without a full re-login if they return in time.

03

Cross-Tab Synchronized Timeout

Every open tab and window shares one timeout state through the presence service, so the session times out everywhere at once instead of leaving other tabs live.

04

Systray Countdown Indicator

A persistent session-status indicator in the top menu shows remaining time at a glance, turning yellow on warning and red once the session locks.

05

Single-Device Enforcement

Optionally restrict each user to one active session at a time, with the affected existing sessions shown before the policy is applied.

06

Logout-on-Close & Route Whitelist

End the session automatically when a tab or browser closes, and exempt specific screens — like long-running dashboards — from the idle timer via an admin-defined whitelist.

07

Masquerade-Aware Handling

Detects when an administrator is impersonating a user and applies distinct or exempt timeout rules for that session, with a clear on-screen indicator.

08

Presets & Pre-Apply Preview

Start from named healthcare, banking, or general-office presets, then run the impact preview to see exactly which users and sessions a policy change will affect before committing it.

09

Audit Log & Metrics Dashboard

Every login, logout, and timeout event is recorded with user, time, and IP for compliance evidence, alongside a metrics dashboard reporting session durations and timeout frequency.

Workflow

How it works

1

Configure policies

Pick a preset or build your own from the dedicated Session Timeout settings panel, then set per-group or per-user overrides.

2

Preview the impact

Run the preview wizard to see exactly which users and active sessions a policy change affects before you apply it.

3

Work without interruption

Real mouse, keyboard, and navigation activity keeps the session alive; every open tab stays in sync on the same timer.

4

Idle sessions lock and log

After a warned grace period the session locks with a resume option, while the audit log and metrics dashboard record the event.

Questions

Frequently asked

No sales fog. If your question isn't here, email us and we'll answer it the same way.

No. Idle detection tracks real mouse, keyboard, and navigation activity, so a user who is actively working never triggers the countdown — only genuine inactivity does.

Get the app

Buy it on the Odoo App Store

Purchase, download and install directly from the official Odoo Apps Store — you'll always get the latest supported build.

Activity Session Timeout

Per-group idle logout with a warned, save-safe grace period, cross-tab synchronization, single-device enforcement and an audit log — the proof of automatic logout an auditor asks for.

Buy on Odoo App Store