<authentication mode="Forms">
<forms loginUrl="~/Account/LogOn" timeout="100" defaultUrl="~/" name="Auth"/>
</authentication>
AND
<sessionState timeout ="1"></sessionState>
Among this 2 which determines the time out period of active log in, if a I am using sql server to store sessions state?
(me in asp.net mvc 2)
<authentication mode="Forms">
<forms loginUrl="~/Account/LogOn" timeout="100" defaultUrl="~/" name="Auth"/>
</authentication>
The above code will determine your logged in user's session time. This means that after 100 minutes of inactivity, a user will be prompted to login again. The default timeout is 30 Minutes if not specified.
<sessionState timeout ="1"></sessionState>
The session timeout configuration setting applies only to ASP.NET pages. Changing the session timeout value does not affect the session time-out for ASP pages.