You can enable Advanced Authentication for the Privileged Access Manager to allow access only to the users who pass the secondary authentication.
To enable Advanced Authentication, Privileged Access Manager administrator must perform the following:
On the home page of the Privileged Account Manage console, click Settings > Server Settings > Authentication.
In the right pane, move the Secondary Authentication Required slider to the right.
To use this, ensure that Netiq Advanced Authentication is enabled.
This setting ensures that the users are prompted for secondary authentication to log into the Administration Console.
Inactivity Session Timeout: Set the time in minutes to timeout the session when in inactive state.