Was asked this question from a client:

Issue – Business Central (IBM BAM OE UI) is getting auto logged out (Session Timeout) in 5-10 minutes which was not the case with RHPAM or jBPM. Can you please help us in this and check what is the causing this auto logout? Is it possible to extend the time?Post

Hi Gerry, 

On my standalone instance, I can change the session timeout in the \boss-eap-7.4\standalone\deployments\business-central.war\WEB-INF\web.xml

Hi Nigel,

This session-timeout = 1440 minutes ( I believe it is set to 1440 minutes by default). 

we got timeout around 10 minutes, so it doesn't seem to be related. 

If it is, then what should we increase the number to?

Thanks,
Thu Phan

Hi Gerry,

I resolved this problem by increasing the <max-age> value:

<!-- the number within the session-timout element must be expressed in
minutes. it is now 24 hours. -->
  <session-config>
    <session-timeout>1440</session-timeout>
    <cookie-config>
      <path>/</path>
      <http-only>true</http-only>
      <secure>false</secure>
      <max-age>1440</max-age>
    </cookie-config>
  </session-config>

The <session-timeout> is in minutes, however, the <max-age> is in seconds.

The <max-age> is set when the JSESSION cookie is expired in seconds, which causing the timeout.

You can either remove the <max-age> or increase it to a higher value.

Hope that helps!