session has nothing to do with authentication.
if you are using forms authentication, the authentication timeout
(default 30 min) is specified in web.config in the authentication section.
-- bruce (sqlwork.com)
> I'm trying to use the ASP.NET 2 Login control to authenticate users held in
> a SQL Server database. Is it possible to implement a finite session period
> of say 20 minutes after which time the user is prompt to re-enter their
> credentials? Is there any way to do it without setting the Session timeout?