Suggested by Riyaan Brink – New
In the Admin center there are features to enable session expirations and inactivity timeouts. These are however only enforced for Model-Driven apps. This is really needed to provide better security for canvas applications as well.