title: Differences in forms auth timeout and session timeout
body: <p>The session state timeout is set using this web.config element</p>
  
  <pre><code>&lt;sessionState mode="InProc" cookieless="false" timeout="120" /&gt;
  </code></pre>
  
  <p>The forms auth is configured using this web.config element</p>
  
  <pre><code>&lt;system.web&gt;
    &lt;authentication mode="Forms"&gt;
      &lt;forms loginUrl="Login.aspx"
             protection="All"
             timeout="30"
             name=".ASPXAUTH" 
             path="/"
             requireSSL="false"
             slidingExpiration="true"
             defaultUrl="default.aspx"
             cookieless="UseDeviceProfile"
             enableCrossAppRedirects="false" /&gt;
    &lt;/authentication&gt;
  &lt;/system.web&gt;
  </code></pre>
  
  <p>What is the difference between the timeouts specified in each of these elements? If both are different, how would it work?</p>