Skip to main content

Extend PSM Session Duration

This article explains how to extend the session time limits for computers managed through EmpowerID's Privileged Session Manager (PSM). Users can request additional access time to active sessions, with support for both immediate extension (for pre-approved resources) and approval-based extension (for standard resources). The feature aligns with existing access policies and workflow controls to ensure security and auditability.

Key Considerations​

💡Important Considerations
  • Session extensions can only be requested for computers with active time constraints.
  • Users can only extend sessions for computers they currently have access to.
  • Extension behavior is based on pre-approval status:
    • For pre-approved computers (isPreApproved = true), extensions are applied immediately.
    • For standard computers, requests are routed through the approval workflow as defined by the computer’s access policy.

Request a PSM Session Extension​

Follow the steps below to request additional session time:

1. Access IAM Shop​

Navigate to the IAM Shop portal.

2. Select Computer Resource​

From the Resource Type dropdown, select Computers.
Resource Type Selection

3. Find the Target Computer​

Go to the Manage Access tab. Search for the computer you want to extend session time for and click Details.
Computer Details

4. Initiate the Extension Request​

Click the Extend button.
Extend Button

5. Set New Duration​

In the dialog that appears:

  • Choose the desired End Date and End Time
  • Click Add to Cart
    Set Duration

6. Handle Extension Based on Approval Type​

Pre-Approved Computers​

If the computer is pre-approved (isPreApproved = true), the extension is processed immediately. A success message confirms the extension.
Pre-approved Success

Standard Computers​

If the computer is not pre-approved, the system adds your extension request to the cart and routes it through the approval workflow.
Standard Request

7. Submit Your Request​

Click the Cart icon at the top of the screen. Then:

  • Review your cart items
  • Choose a Justification from the dropdown or select Other and enter your reason
  • Enter a Business Request Name
  • Set a Due Date
  • Add optional Comments
  • Click Submit
    Submit Request

8. Confirm and Track Submission​

A confirmation message displays with a link to monitor request progress.
Request Confirmation

9. Monitor Task Progress​

To track your extension request, navigate to My Tasks.
Task Status

Approving a PSM Session Extension Request​

Requests for standard (non-pre-approved) computers are routed through EmpowerID’s approval workflow. Approvers receive tasks in My Tasks and can take action based on policy.

ℹ️Approval Scope

Approval is only required for standard computers. No action is needed for pre-approved computers.

Approval Procedure​

  1. Go to My Tasks as an approver.

  2. Locate the Business Request generated for the session extension.

  3. Review request details.

  4. Click Approve or Reject.

    Upon approval, EmpowerID updates the time constraint to reflect the extended session window.
    Approval Interface

How Extensions Are Processed​

Two core workflows control session extension behavior, depending on whether the computer is pre-approved.

ℹ️Workflow Logic

EmpowerID dynamically selects the appropriate workflow based on the computer's pre-approval status.

1. Standard Computers​

  • Workflow Name: ResourceAccessAssigneeFulfillment
  • Function: Handles extension through a formal approval process
  • Trigger: Submission of extension request via IAM Shop cart
  • Includes: Business Request generation, policy-based approval routing, and time constraint update

2. Pre-Approved Computers​

  • Workflow Name: UpdateExternalCredentialCheckOutTimeConstraintWF
  • Function: Immediately updates the session without approval
  • Trigger: API endpoint activation tied to the Extend button
  • Notes: Bypasses Business Request logic for faster fulfillment

By following these procedures, EmpowerID administrators and users can manage privileged session durations effectively, with policy-based control and full auditability.