How to set user login session to time out?

[computerhighway]

How can we set that a user session times out after a certain time of inactivity or on closing the browser? Is that something which need to be controlled from php.ini? If yes, what attributes?

[alasdaircr]

There's a scheduled job you can add called Auth Token Control. I'm not sure what it actually does as no documentation, so haven't enabled it myself.

[yuri]

1. Administration > Authentication
* Auth Token Lifetime (hours)
* Auth Token Max Idle Time (hours)

2. Administration > Scheduled Job - check whether "Auth Token Control" is Active

[computerhighway]

Great, many thanks. Sorry, should have found myself.