Thursday, July 24, 2008

Forms Authentication timeout default in ASP.NET 2.0

Forms authentication timeout value has changed to be 30 minutes by default in ASP.NET 2.0. This means that after 30 minutes of inactivity, a user will be prompted to login again (note: everytime they hit the site the 30 minute window clock gets reset -- so it is only if they are idle that it will timeout).

If you want to change the timeout value to be longer, you can easily change the timeout value in your local web.config file (the timeout value is in minutes):

<system.web>
<authentication mode="Forms">
<forms timeout="50000000"/>
</authentication>
</system.web>