Session configuration is generally defined in /config/app.php . Session.timeout - The number of minutes before CakePHP's session handler expires the .