How to increase session time for login in asp.net

Question

how to increase the session time for logged in user.?

i knw in return i will get reply as in web.config file to be considered as below.

<forms loginUrl="CS.aspx"

protection="All"

timeout="2880"

name=".USERLOGINCONTROLAUTH"

path="/"

requireSSL="false"

slidingExpiration="true"

defaultUrl="CS.aspx"

cookieless="false"

enableCrossAppRedirects="false"/>

</authentication>

in dis above code highlifghted part tells the timeout n cookieless part.

but still session ends early den expected.

as example : gmail.com , facebook.com, etc where in user logged in session remains for longer time.

i need the same.

do give me proper n best solution for expertise please

Sunny Sharma · Answer

please refer to this post by Scott Hanselman, I hope this will help you: http://www.hanselman.com/blog/HowToGetCookielessFormsAuthenticationToWorkWithSelfissuedFormsAuthenticationTicketsAndCustomUserData.aspx

Guruprasad Anvekar · Answer

but if u c in my code itself i hav mentioned in 8th line ' slidingExpiration="true"' so wat next step??? its already present in my code itself. any other solution for making user logged in for longer time by session>?? i need like gmail or facebook kind of stuffs for session logged in. plz do give best solutions

Guruprasad Anvekar · Answer

So do u mean to say: slidingExpiration="true" has to be used and by using this session time out wont expire early? plz give detailed explanation. needed urgently. jus by applying dis slidingExpiration="true" the session wont expire early?

Sunny Sharma · Answer

you need to do this in your web.config file itself. it's a single attribute that you need to mention in your code in authentication section. see my reply above with your code modified.

Guruprasad Anvekar · Answer

i didn understand still about dis above answer. where exactly i need to do dis.? as i hav online project running in server n my client shout as its session time out happens early. do give me best solution as i hav mentioned like gmail.com or facebook.com

Sunny Sharma · Answer

Set the Sliding Expiration to true. protection="All" timeout="2880" name=".USERLOGINCONTROLAUTH" path="/" requireSSL="false" slidingExpiration="true" defaultUrl="CS.aspx" cookieless="false" enableCrossAppRedirects="false" slidingExpiration="true" /> It resets the timeout for on every request made. HTH :)

Joxin Stanly · Answer

please check below link (it helps to prevent session timeout making use of heartbeat pattern) http://weblogs.asp.net/stevewellens/archive/2009/06/09/ah-ah-ah-ah-staying-alive-staying-alive.aspx

Sanjeeb Lenka · Answer

may be the session timeout is set in iis just check that and increase it Application Pool => Advanced Settings => Process Model => Idle Time-out Sites => whatever web needs to be set => ASP => Session Properties => Time-out Sites => whatever web needs to be set => Configuration Editor => system.web/sessionState => timeout Sites => whatever web needs to be set => Configuration Editor => system.web/roleManager => cookieTimeout or refer to these links http://beyondrelational.com/modules/2/blogs/604/posts/14607/session-timeout-in-iis-7-worker-process-of-applicationpool.aspx http://asp-net.vexedlogic.com/2012/05/23/aspasp-net-session-timeout-how-do-i-change-it /

How to increase session time for login in asp.net

Answers (8)