Currently Bamboo has a user session timeout option that can be adjusted in the web.xml file, and the ability to invalidate a users session on Bamboo 9.3. Yet, there's not option to set a max session timeout where it will log out all active sessions after a specific time.