{"v":"<p dir=\"auto\">Done in 6c07bb9: the idle sign-out is now 15 minutes (was 3). It is one constant, <code>SESSION_IDLE_TIMEOUT<\/code> in <code>code\/functions_auth.inc.php<\/code>. The browser countdown reads its remaining time from <code>\/do\/sessionCheck<\/code>, so the &#34;Stay Signed In&#34; warning still appears with 1 minute remaining (after 14 minutes of inactivity). The 12-hour absolute limit is unchanged.<\/p>\n<p dir=\"auto\">Takes effect once deployed. Note: 3 minutes was the documented HIPAA automatic-logoff setting, so any policy document that states 3 minutes should be updated to say 15.<\/p>\n"}