What is the maximum session timeout?

• A. Three hours
• B. Four hours
• C. Two hours
• D. Eight hours

Answer: (C)

The setting controls how long a user can stay signed in without activity before the system requires re-authentication. In DocuSign CLM, the cap for this session timeout is two hours. This limit provides a balance between usability and security: it prevents long, unattended sessions on shared devices while still giving users a reasonable window to complete work without being interrupted by frequent logins. If an idle period reaches two hours, the user will be logged out and must sign in again. Admins can choose shorter timeouts if desired, but they cannot set a value longer than two hours, which is why two hours is the correct maximum.