Best if the 3rd-party apps use SSO as well as Genesys Cloud. Each Integration with the 3rd-party app should have the ability to set authentication timeouts. In the advanced configuration for the integration, there are sometimes controls you can put in like:
{
"pool": {
"connections_idle_time": 60,
"connections_max": 10
}
}