In my application I have an option for the users to change their session time. There will be a single server which can be accessed by different users at the same time. The web.xml will contain the latest timeout given by any user. We have a single web.xml and how it works for different login id at the same time, or is it been taken care of tomcat. Can you just explain me on this.