When users forget to lock their workstations and/or sign out from the Azure portal when finished, this globally established Azure AD directory-level setting automatically signs out the account when a maximum idle time has been reached. There are a number of preset values, or you can utilize a custom value to enforce (in both hours and minutes).