Hello Everyone,
Was just notified of this post by another school. Hopefully I can shed some light into why you may be seeing a large difference between last_login and last_request.
The most immediate example that comes to mind is mobile sessions. When a user first logs into the mobile app, it creates a session that will persist forever until they uninstall the app, or explicitly log out. You can hopefully see now how this large gap can easily occur.
Another example of a long standing session may also be a user who has never closed the Canvas tab within their browser. We do not force people out of the system (banks do this by automatically redirecting you to login page), but rather wait for their next request to the system to verify the authentication. This also could result in a session seeming to span a day or more. Just as a note, the default Canvas Authentication session is set at 24 hours.
Please let me know if you have further questions about this.
Thank you!
This discussion post is outdated and has been archived. Please use the Community question forums and official documentation for the most current and accurate information.