Andre,
To answer your question - yes, onLogout is called when the session is "timed out" - ie when the time from last received message is greater than some multiplier of heartbeat interval.

It's also called from a few other places, such as wrong versions, fields missing from logon, etc

Thanks for your quick response.

Is the multiplier configurable?

How does one differentiate a "gracefull" logout from a timed out session or other error from the listener?