Absolute session timeout: Create a security feature in service web that allows admins to force users to authenticate every X number of days
Use Case: The CISO is working with security auditors and regulators to ensure their UCaaS platform adheres to security best practices. The security regulators and auditors want to ensure users are being forced to authenticate in the RingCentral app(s) at least once every 90 days.Current problem: RingCentral does not provide a way for basic authentication users or SSO users to be forced to authenticate after a defined number of days. Impact: The CISO is displeased and annoyed with how RingCentral security works. The customer is exploring paying for the development of a custom integration into RingCentral that would disable and then enable all active users every 90 days, which would force users to authenticate. This is perceived as a major annoyance and preventable cost by the CISO for something that should be security table stakes from the leading UCaaS provider.Feature request: Add an absolute session timeout security feature to ServiceWeb that allows admins to define how many days a user's authentication token is valid. After the defined number of days, the token should expire and the users should be forced to authenticate into all RingCentral apps again.