Session validity is configurable through the “Web.Config” file by setting Session "timout" to x minutes or days in minutes format.

 

User authentication is also configurable though the “Web.Config” file by setting Forms "timout" to x minutes or days in minutes format.