# Login to open.DASH via Session Token in the URL
You can open an open.DASH page on a display by passing a valid session token as a URL parameter.
## Prerequisites
- Use a normal workstation browser.
- Log in with the same user account that should later be used on the device using the shared session.
## Extract the Session Token
1. Open the open.DASH page and log in with the target user.
2. After login, stay on the page with the dashboard tiles.
3. Press `F12` to open the browser developer tools.
4. Open the `Application` tab.
5. In the left sidebar, select `Local Storage`.
6. In the main area, find the entry `Parse/openinc-APPID/currentUser` and copy its value from the right column.
The content looks similar to this:
```json
{
"username": "
[email protected]",
"email": "
[email protected]",
"sessionToken": "r:5625*********4baar"
}
```
Copy the value of `sessionToken` without quotation marks, for example:
```text
r:5625*********4baar
```
## Important Warning
Do not click `Log out` after extracting the token. Logging out invalidates the token.
If you need to remove the current login from the browser without invalidating the session:
1. Stay in the developer tools.
2. Open `Storage`.
3. Click `Clear Site Data`.
This removes the remembered browser session locally, but keeps the session token valid. After that, you can log in again normally if needed.
## Build the Display URL
1. Open the page that should be shown on the display.
2. Copy the page URL from the browser address bar, for example:
```text
http://IP_OF_THE_SERVER/monitoring/dashboards/EQeyeR2eO6/ELlFyxIrKb
```
3. Append the token as the `session` query parameter:
```text
http://IP_OF_THE_SERVER/monitoring/dashboards/EQeyeR2eO6/ELlFyxIrKb?session=r:8085*********4ba8
```
Remark: If there are already query parameters (there is already a '?' in the url) append the session with
```text
&session=r:....
```
Use this final URL on the device.
## Expected Behavior
On the first request, the page may still appear empty because the login via token is only established at that moment.
After the first reload, the page should display normally.
## Token Validity
- Session tokens are valid for one year.
- This process must therefore be repeated once per year.
- The same token can be used on multiple devices as long as nobody logs out with that user.