Logon tokens

A logon token is an encoded string that defines its own usage attributes and contains a user's session information. The logon token's usage attributes are specified when the logon token is generated. These attributes allow restrictions to be placed upon the logon token to reduce the chance of the logon token being used by malicious users. The current logon token usage attributes are:

• Number of minutes

  This attribute restricts the lifetime of the logon token.

• Number of logons

  This attribute restricts the number of times that the logon token can be used to log on to Crystal Enterprise.

Both attributes hinder malicious users from gaining unauthorized access to Crystal Enterprise with logon tokens retrieved from legitimate users.