skills.rest
zscaler
zscalerOFFICIAL
Explore all skills by this author →
WebsiteGitHub

zpa-create-timeout-policy-rule

Create ZPA timeout policy rules with re-authentication and idle timeout conditions.

44|24|Updated May 29, 2025
Search Tags:#session#policy#timeout#conditions#reauth#zpa
One-click install
npx skills add https://github.com/zscaler/zscaler-mcp-server --skill zpa-create-timeout-policy-rule
Or copy as Structured Prompt for Agent▼
Please help me install this Agent Skill.
Skill: zpa-create-timeout-policy-rule
Source: https://github.com/zscaler/zscaler-mcp-server/tree/main/skills/zpa/create-timeout-policy-rule
Command: npx skills add https://github.com/zscaler/zscaler-mcp-server --skill zpa-create-timeout-policy-rule

SYSTEM DOCUMENTATION & REQUIREMENTS

What problem does it solve?

Administrators need to configure session re-authentication and idle timeouts for ZPA to balance security with user productivity.

Core Features & Use Cases

  • Define reauth_timeout and reauth_idle_timeout values to control how long a user session remains active and how long an idle session persists.
  • Support conditional targeting using APP, APP_GROUP, CLIENT_TYPE, SAML, SCIM, SCIM_GROUP, PLATFORM, and POSTURE to tailor timeouts per app, group, platform, or device posture.
  • Provide ready-to-use workflows for common scenarios like per-app timeouts, contractor access, mobile devices, and posture-based exceptions.

Quick Start

Configure a timeout rule by specifying a name, reauth_timeout, reauth_idle_timeout, and optional conditions to apply to targeted apps, groups, platforms, or posture profiles.

Frequently Asked Questions about zpa-create-timeout-policy-rule

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I configure ZPA session timeouts for specific applications and user groups?▼

You can enforce ZPA re-authentication by creating a timeout policy rule that sets reauth_timeout and reauth_idle_timeout values, combined with structured conditions targeting SAML, SCIM, or platform attributes.

What conditions can I use to target ZPA timeout policies?▼

ZPA timeout policies support condition targeting using APP, APP_GROUP, CLIENT_TYPE, SAML, SCIM, SCIM_GROUP, PLATFORM, and POSTURE attributes to tailor session lifetimes for specific deployments.

Can I set different idle timeout limits for contractors versus full-time employees in ZPA?▼

Yes, ZPA timeout policy rules can apply different reauth_idle_timeout values to contractors by utilizing SCIM, SCIM_GROUP, or SAML conditions to differentiate user access levels.

Does ZPA timeout policy creation require specific input validation for rule attributes?▼

Yes, creating a ZPA timeout policy rule validates inputs such as reauth_timeout, reauth_idle_timeout, action_type, description, and the structured conditions payload to ensure safe rule creation.

How do device posture checks work with ZPA re-authentication timeouts?▼

Device posture checks integrate with ZPA re-authentication timeouts by applying POSTURE conditions within the timeout policy rule, allowing session lifetimes to adapt based on endpoint security state.

Related Skills

Explore More Legal & Compliance Skills→
zscalerzscaler
44

zpa-create-forwarding-policy-rule

Configure ZPA forwarding policy rules with actions and condition blocks.

Official
Advanced
cpoepkecpoepke
2

stop

Release the active voice session and stop the audio server when no other sessions are active.

Community
Intermediate
zscalerzscaler
44

zpa-onboard-application

Automate end-to-end ZPA application onboarding from connector groups to access policies.

Official
Advanced
voidrotvoidrot

terraform-module-library

Create and manage reusable Terraform modules for AWS, Azure, GCP, and OCI.

Community
Advanced