If you are running SmarterMail under Microsoft IIS then the SessionState Time-out defined either in your IIS Site Properties or in your Smartermail\MRS\web.config file determines when a user's session expires and they are automatically logged out of SmarterMail.