well, i dont know about "CA SiteMinder",
but there is one thing common in your app:
ajax calls fail after 30 mins..
so, i suggest, why dont you create a design that , on the failure of an ajax call, try to check if the user is authenticated, if not re-authenticate the user ?
having said that, I wonder in what situation would a user keep a browser window open for that long