Can I setup the script to logout user for IA session?

[Roy_Tam]

We are using the AD to authenticate the user to access web browsing and internet application. The  user access is granted for 720 minutes. For example, the user logon the IA at 8:00am yesterday, then relogon at 8:00pm. On the next day, the session should be expired at 8:00am again. The problem is, the user will observe the disconnection if he's back to office earlier then 8:00am. Usually, the IA session should be timeout if the user's back to office after 8:00am, and the session will be connected when the PC logon.

Is it possible to run the script to logoff the IA when the user logoff the PC? Or can run the scheduled script on Checkpoint to force the user logoff the IA at mid-night?

[_Val_]

If you are using Identity Agent, you will ahve the desired behaviour

[Roy_Tam]

So it's not able to add scripting to force logoff the user from IA?

Can I check who is the users is logging on the IA?

[KennyManrique]

You can use the IA API calls for Delete Identity:

https://sc1.checkpoint.com/documents/R80.10/WebAdminGuides/EN/CP_R80.10_IdentityAwareness_AdminGuide...

[Roy_Tam]

Thanks a lot for the document!