Hello Mohamed, First of all... 'http://gluunew.readthedocs.io/' is not our official documentation site; so following that might not be a good choice. Second.... about 'session timeout'. There is actually no functionality which force users to login after X seconds out of the box in Gluu Server ( because it is out of OpenID Connect specifications) . But every token has lifetime; so if access_token consumed by oxtrust is expired then it will may 1) refresh existing one 2) redirect for re-login.

Thank you for your answer Mohib. Ok i understand. So what is the access token default lifetime? Can we modify it?

Yes... you can modify it from oxTrust. 'Configuration' --> 'JSON Configuration' --> 'oxAuth Configuration'