Where you are signed in

Every device where your account is open right now.

Sign out all other sessions Back to profile

This screen answersUS-41 US-51

Acceptance criteria

US-41 Session Management HIGHEST NEW SCREEN

As a portal user, I want my session to time out after inactivity and fully end on logout, so that my account can't be accessed from an unattended or stale session.

Inactive session times out after a configurable period → re-auth required.
Concurrent-session rule defined (allow/deny/limit).
Logout fully invalidates the session token.

US-51 User Profile Screen HIGHEST NEW SCREEN

As a portal user, I want a profile screen to view my email and organization and change my password, so that I can manage my own account.

Authenticated user can open a Profile screen (none exists today).
Profile shows own email + associated organization.
User can change own password from Profile (current-password re-entry required).
Email edit is admin-only (view-only for the user). see US-53 for admin path.

Wireframe state

DefaultConfirm sign out all

Idle sessions end by themselves. A session ends after 20 minutes without activity. Sign out any device you do not recognize, then change your password.

Device	Place	Last active
Chrome on WindowsSigned in 05 Oct 2026, 08:02	Riyadh, Saudi Arabia	Active now	This device
Edge on WindowsSigned in 05 Oct 2026, 07:41	Riyadh, Saudi Arabia	Active 25 min ago	Sign out
Safari on iPhoneSigned in 04 Oct 2026, 18:20	Riyadh, Saudi Arabia	Active yesterday	Sign out