Updated Date: 07/07/2026
Creating an access profile for ephemeral authentication
You create an access profile to specify an access policy for traffic that requires ephemeral authentication.
-
On the Main tab, click Access > Profiles / Policies.
The Access Profiles (Per-Session Policies) screen opens.
-
Click Create.
The New Profile screen opens.
-
In the Name field, type a unique name for the access profile.
-
For the Profile Type, select All.
-
Leave the Profile Scope, set to Profile.
-
For Customization Type, select Modern.
You can also use Standard but Modern customization is simpler and provides better compatibility for modern cross-platform and cross-device applications.
-
On the right of Settings, select Custom.
-
For Inactivity Timeout, shorten the time, for example, to 300 sec (5 min) or an appropriate value shorter than the default.
-
For Maximum Session Timeout, shorten the time, for example, to 36000 sec (10 hours) or an appropriate value shorter than the default.
-
If using SSO (Basic Authentication or Form-Based SSO only), you need to have created an SSO Configuration; in the SSO Configuration field, select the configuration.
-
In the Language Settings area, add and remove accepted languages, and set the default language.
If no browser language matches one in the accepted languages list, the browser uses the default language.
-
Click Finished.
The access profile displays in the Access Profiles List. Default-log-setting is assigned to the access profile. Using shorter values for the Inactivity Timeout and the Maximum Session Timeout prevents malicious users from accessing multiple WebSSH resources and maintaining long-lived connections.