[keycloak-user] sso timeouts ??

I am using Standard Flow Enabled with javascript adapter connecting to rest bearer-only apis. SSO Session idle set 2h. User is using the app, it redirects to login page before 2h is reached. Anyone here knows what is the right realm setting if I want to have a user working on a sso session for a number of hours? I guess not fully understand the Token lifespan vs SSO session timeout and which one rules, etc.