Posted Wed, 27 Jun 2018 20:04:45 GMT by Bruce Randolph

Since DocuWare has removed the functionality to set session timeouts we are left with the real possibility that any given user could log into the application and walk away from their computer and DocuWare would continue to maintain that session indefinitely.

In order for our organization to remain compliant with IRS Pub 1075 and NIST standards, we need some means for developing a mechanism by which we can at least determine who has been logged in for a given period of time (e.g. longer than the 8 hour work day). I have been reviewing the database tables and can only find informaiton on when the license for a current connection is set to expire (which is meaningless since DocuWare automatically extends the license before that time expires). Does DocuWare maintain any data that indicates when a user logs into the application and if so where can that be found?

Posted Wed, 27 Jun 2018 20:17:00 GMT by Phil Robson DocuWare Corporation Senior Director Professional Services, Americas

Bruce,
This is indeed a subject of some interest. DocuWare as an application  requires that the users workstation is locked after a period of time to conform to the NIST standards. Now within its own mechanisms it will not log a user out automatically. Since the tracking mechanism in the licensing table does not keep the original log in time I suggest you make an request in the User Voice site so that the Product Owners can assess the requirement.

https://docuware.uservoice.com/

 

Phil Robson

Senior Director Support Americas

 

 

You must be signed in to post in this forum.