I've changed the Oauth2 token lifetimes in config.php to prevent external services like the Outlook plugin from getting logged off.
I have also installed jQuery Idle Timeout plugin which logs the user out after a some period of inactivity in the browser.
This idle timeout does not log the user out if their browser instance is closed, because the JS is not able to run.
Have you seen or implemented some sort of a web client session timeout in Sugar where the user gets logged out after some period of inactivity even if they don't have Sugar open in the browser? Or is there a built-in setting/feature that facilitates that?
Note that it's important to keep the Oauth2 token lifetimes very high to keep the Outlook plugin connnected practically indefinitely, so there has to be a solution for the web client specifically.