ASP.NET Authentication Cookie timout and IIS 7 setting

Posted by David Laplante on Stack Overflow See other posts from Stack Overflow or by David Laplante
Published on 2010-06-11T14:05:22Z Indexed on 2010/06/11 19:22 UTC
Read the original article Hit count: 413

Filed under:
|
|

Hello,

I have an ASP.NET website for which i've set the authetication timeout to 60 days so that my users don't have to log in each time they come back if they checked the "remember me" option. Basic ASP.NET login mechanism...

It's working fine on my developpement server as well as on the visual studio built-in web server. I can close the browser, wait around 30-40 minutes and browse back to the site and be automatically logged in.

However, I've not moved the site to a hosting provider and it seems that whatever I do to my Web.config file, the cookie expires after around 30 minutes (hard to tell the exact amount of time). I have asked the provider's help support and they basically told me:

"Web.config file is to configure your website. Please do not change it if you don't know what you are doing"

Frustrating answer indeed...

To be sure, I checked everywhere on the net for exceptions, fine prints, in the basic asp.net authentication but found none.

I have access to IIS remote management for my site (IIS 7) but don't really know where to look. Can there be something in the IIS setting that is overriding my web.config authentication setting? What should I do...

Thanks for you help!

© Stack Overflow or respective owner

Related posts about ASP.NET

Related posts about authentication