Definition
Session Management is the process of controlling how user and system sessions are created, maintained, monitored and terminated after Authentication.
Human Explanation
After sign-in, the system must manage the active session, including its validity, security and termination.
Why it Matters
Poor Session Management may allow active access to be taken over without knowledge of login credentials.
Conceptual Boundary
Session Management begins after Authentication and does not replace Authentication or Authorization mechanisms.
Practical Perspective
A session should remain protected throughout its duration and end automatically when continued access is no longer needed.