<authentication mode="Forms">
<forms loginUrl="~/Account/LogOn" timeout="100" defaultUrl="~/" name="Auth"/>
</authentication>
AND
<sessionState timeout ="1"></sessionState>
Among this 2 which determines the time out period of active log in, if a I am using sql server
to store sessions state?
(me in asp.net mvc 2)
The above code will determine your logged in user’s session time. This means that after 100 minutes of inactivity, a user will be prompted to login again. The default timeout is 30 Minutes if not specified.
The session timeout configuration setting applies only to ASP.NET pages. Changing the session timeout value does not affect the session time-out for ASP pages.