I have an ASP.NET v4 web-site using SQL Server provider based FormsAuthentication to prevent anonymous users from accessing parts of the site. I would like to keep users authenticated for a week if they check RememberMe when logging in (using a templated
standard login control). However, I cannot get this to work. My site works in the following manner when the user checks RememberMe.:
1. If the user returns to the site (regardless of whether or not they start a new browser session) within 10.5 minutes of logging in, they are authenticated automatically as desired.
2. If the user returns to the site after 10.5 minutes of logging in, they are forced to log in again after the server sends a 302 response with the login location.
My FormsAuthentication configuration looks like this:
<authentication mode="Forms">
<forms requireSSL="false" loginUrl="~/Login.aspx& ...
Go to the complete details ...