Hi,
please use TIMER component (below BEANPROCESSING):
There are two attributes:
1. DURATION - this is the "timeout duration", e.g. 600000 for 10 minutes
2. DURATIONTYPE - in your case you may either use "lastroundtrip" or "lastactivity"
The TIMER calls an ACTIONLISTNER.
In the processing of the actionListener you may just invalidate the current session.
Code:
HttpSessionAccess.getCurrentHttpSession().invalidate();
So a fresh session is opened up - starting with the first page of your application, which typically is the logon page...
...or you may your own application logic in the actionListner to navigate back to the logon screen.
Regards, Björn