How to Change Storefront Session Timeout in B2C Commerce

Storefront session timeouts are distinct from Business Manager timeouts and can be configured by in Business Manager with values in a range of 15-120 minutes. These changes are applied only to subsequent storefront sessions.

Per the Session Class documentation:

• Soft Timeout: An idle session is rendered invalid after 30 minutes by default. This logs out the user and clears all privacy data, but the session can still be reopened with the same Session ID.
• Hard Timeout: The session is rendered after 6 hours, even if the session is in use. This prevents a session from being reopened — for example, if a Session ID is pasted into the URL.