title: Session Time-Out after 10 minutes
body: <p>We've got a huge problem.
  We're using the Belgian eID (electronic identity card, this is a smart card). The <code>Claim</code> which is returned, is used by our Forms Authentication.</p>
  
  <p>Everything works fine, but after 10 minutes (of activity or inactivity, doesn't matter), it automatically logs out.</p>
  
  <p>Here the <strong>code</strong> fragment where we <strong>create</strong> the session:</p>
  
  <pre><code>private void CreateSession(ClaimsPrincipal transformedPrincipal)
  {
      SessionSecurityToken sessionSecurityToken = new SessionSecurityToken(transformedPrincipal, TimeSpan.FromHours(1));
      FederatedAuthentication.SessionAuthenticationModule.WriteSessionTokenToCookie(sessionSecurityToken);
  }
  </code></pre>
  
  <p>In the <strong>Web.config</strong>, we set the session timeout:</p>
  
  <pre><code>&lt;sessionState cookieless="false" timeout="60" /&gt;
  </code></pre>
  
  <p>On the <strong>IIS server</strong>, we set the Application Pool Idle Time-out to 8 hours.<br />
  We also set the Regular Time Interval of the recycling to 8 hours.</p>