In Symfony 2.3, I think the correct answer is found in app / config / config.yml:
framework: session: cookie_lifetime: 7200 gc_maxlifetime: 3600
GC (garbage collection) will be reset every time the server hits, that is, if the user is active, he will have 3600 to continue working. cookie_lifetime will force the user to fail. In this example, the user will have one hour to be inactive and will be forced out after 2 hours.
source share