Forms authentication timeout vs sessionState timeout

by

They are different things. The Forms Authentication Timeout value sets the amount of time in minutes that the authentication cookie is set to be valid, meaning, that after value number of minutes, the cookie will expire and the user will no longer be authenticated—they will be redirected to the login page automatically. The slidingExpiration=true value is basically saying that as long as the user makes a request within the timeout value, they will continue to be authenticated (more details here). If you set slidingExpiration=false the authentication cookie will expire after value number of minutes regardless of whether the user makes a request within the timeout value or not.

The SessionState timeout value sets the amount of time in minutes a Session State provider is required to hold data in memory (or whatever backing store is being used, SQL Server, OutOfProc, etc) for a particular session. For example, if you put an object in Session using the value in your example, this data will be removed after 30 minutes. The user may still be authenticated but the data in the Session may no longer be present. The Session Timeout value is always reset after every request as suggested here and here (might require cookies; vs cookieless)

More Related Contents:

  1. Replacing ASP.Net’s session entirely
  2. Using different Web.config in development and production environment
  3. How do you modify the web.config appSettings at runtime?
  4. Losing Session State
  5. Close/kill the session when the browser or tab is closed
  6. Avoid web.config inheritance in child web application using inheritInChildApplications
  7. Which gets priority, maxRequestLength or maxAllowedContentLength?
  8. Setting up connection string in ASP.NET to SQL SERVER
  9. ASP.NET web.config: configSource vs. file attributes
  10. Chrome localhost cookie not being set
  11. Difference between and ?
  12. Reading web.config from JavaScript
  13. How can I share a session across multiple subdomains in ASP.NET?
  14. HTTP Error 500.19 – Internal Server Error
  15. Escape quote in web.config connection string
  16. What are the Web.Debug.config and Web.Release.Config files for?
  17. ASP.NET Stress Testing
  18. Login failed for user ‘NT AUTHORITY\NETWORK SERVICE’
  19. Store String Array In appSettings?
  20. ASP.NET MVC – Session is null
  21. Web Config Transform not working
  22. asp.net cookies, authentication and session timeouts
  23. ASP.NET: How to access Session from handler? [duplicate]
  24. Session lock causes ASP.Net websites to be slow
  25. The configuration section ‘system.web.extensions’ cannot be read because it is missing a section declaration
  26. What is the maximum size a session variable can hold?
  27. web.config and app.config confusion
  28. Unrecognized attribute ‘targetFramework’. Note that attribute names are case-sensitive
  29. Specify more than one directory in Web.Config’s Location Path element
  30. asp.net session variables on Session_End

Leave a Comment