User Getting Signed Out In Every 20 Mins

Question

User-200742054 posted

I am using asp.net forms authentication for our website. User is getting signed out in every 20 mins when they are not doing anything on website. I made change on App Pool in IIS and changed the Idle Time-Out to 60 mins. I also tried changing the webconfig. I added timeout=120 in <authentication> tag and also added timeout=120 in sessionState tag. But none of these is working. Can someone please help me in increasing the signout time for the user. I want to make it as much as possible.

<sessionState mode="InProc" customProvider="DefaultSessionProvider" timeout="120">

<authentication mode="Forms">
<forms defaultUrl="Welcome" name=".ASPNETAUTH" loginUrl="~/Login/LoginView" timeout="120" slidingExpiration="true"></forms>
</authentication>

Thank you,

JW

Answer 1

User475983607 posted

Setting the timeouts as descried should work.  Keep in mind the users must login again to get the updated auth cookie.

Answer 2

User-200742054 posted

I tired all these already but it is not working.

Answer 3

User-893317190 posted

Hi jason2widener,

Please check your auth cookie's timeout to see whether it is right. Click the icon on the left of your address bar in chrome browser to see cookies

To prevent  in-memory session is lost through application pool recycle, you could use out-of-process session or sql server database.

https://forums.iis.net/t/1200722.aspx

Also  please  ensure you don't have other logic which covers the default behavior of  webform forms authentication.

https://stackoverflow.com/questions/38404429/forms-authentication-timeout-being-ignored

Best regards,

Ackerly Xu