Are there any plans to add SSO session timeout / inactivity timeout to Cloudron? I am finding that when I configure timeout (e.g. when browser is closed) within apps that are using Cloudron's SSO, the SSO is still keeping the user logged in.
Many businesses require sessions to expire after inactivity or browser closure for security audits.
If a user forgets to log out on a shared machine, a "timeout on close" or "idle timeout" is the only line of defense.
Most professional SSO providers (like Okta or Auth0) allow admins to set a "Max Session Age" or "Inactivity Timeout" at the platform level.