Session expired not working in production

Hi,

My app uses Microsoft AD for login (local and production)
I had set the session time out in app properties as below:

jmix.ui.http-session-expiration-timeout-sec=360
vaadin.servlet.heartbeat-interval = -1

It’s working in the local app (timeout → Microsoft login) but when I deploy in the Google Cloud, it’s timeout but auto log in again instead of the login page.

Please help,
Ngan