It should be rather disappointing that when I enter the 11th working hour of the day, the KeyCloak session expires anyway. Who wants to always work less than 10 hours?

Hi, it's up to Keycloak admins to define the session expiration time. If "SSO Session Max" parameter is set to "10 hours", there's a good chance that this is still the default configuration... Like many other things in Keycloak such as "brute force detection" disabled, "roles" scope by default, etc...