Jira protects access to its administrative functions by requiring a secure administration session in order to use the Jira administration screens. (This is also known as websudo.) When a Jira administrator (who is logged into Jira) attempts to access an administration function, they are prompted to log in again. This logs the administrator into a temporary secure session that grants access to the Jira administration screens.

The temporary secure session has a rolling timeout (defaulted to 10 minutes). If there is no activity by the administrator in the Jira administration screens for a period of time that exceeds the timeout, then the administrator will be logged out of the secure administrator session (note that they will remain logged into Jira). If the administrator does click an administration function, the timeout will reset.

Disable

You may need to disable WebSudo if you need to install functionality that is incompatible with it (e.g. Azure AD SSO). To disable WebSudo...

Add this to the jira-config.properties file in /media/atl/jira/shared...

jira.websudo.is.disabled = true

Bibliography