In our landscape, 10 applications are hosted on a single Pega Cloud platform. We wanted to impose the session timeout for all applications using a single configuration. This is particularly for SSO based users.

Using access groups configurations, all applications will have do this configuration locally for all their access groups.

timeout/application and timeout/browser settings are not working with SSO where authentication service is involved.

Including pxSessionTimer section is also a local change which needs to be repeated for all applications. 

Any better approach?