Still on Drupal 7? Security support for Drupal 7 ended on 5 January 2025. Please visit our Drupal 7 End of Life resources page to review all of your options.
I minor update to the settings form that emphases that the max_session_timeout settings is primary for user level timeouts in user form when that is enabled.
New featrue: Autologout alterable now has a feature to clean up old session on server side. It can be turned of with the use_cron config, enabled by default.
The cron job analyses old sessions with the same rule set regarding timeout and max_session_length. The autologout profile can also in cron context be altered via the event AutologoutEvents::AUTOLOGOUT_CRON_PROFILE_ALTER_CRON.