Payment Services Directive II and the five minute logout

The automatic logout after five minutes of inactivity is a regulatory requirement for banks and payment service providers under the PSD 2 regulation to increase security in online banking. See article 4(3)(d) of the DELEGATED REGULATION (EU) 2018/389 (RTS), https://eur-lex.europa.eu/legal-content/EN/TXT/PDF/?uri=CELEX:32018R0389&from=EN ("the maximum time without activity by the payer after being authenticated for accessing its payment account online shall not exceed 5 minutes.").

This automatic logout applies to all users of the Corporate Banking Portal, including GPP and TMS application users, if they have not made any entries or actions within five minutes.

It is not possible to adjust or extend the timeout for the reasons stated above.