When Should an Auto Logout Popup Warning Message Appear?

My application is required by our security team to log users out after 20 minutes of inactivity. We don't currently have a message warning users that this will happen, leading to confusion/frustration for users. Is there an industry for how soon a message should appear? The last 10% of the timer? I.E. 2 minutes in my scenario.