Set force logout if idle

Can I set a idle time limit on a website in IIS to logout a user? does
it have to be a SSL site?

thanks

Rick

Re: Set force logout if idle

On Nov 23, 4:13 am, Rick wrote:
> Can I set a idle time limit on a website in IIS to logout a user? does
> it have to be a SSL site?
>
> thanks
>
> Rick


Technically, there is no such thing as "idle timeout" in HTTP for IIS
to implement because HTTP is stateless -- i.e. nothing to idle timeout
if there is no state. Thus, IIS doesn't have anything that looks like
"idle timeout".

However, application platforms on top of IIS, like ASP, ASP.Net, PHP,
etc as well as Authentication protocols such as Basic, NTLM, and
Kerberos, do have notions of state and hence timeout since they have
ways to maintaining state using HTTP. They are all configured
differently.

Thus, the answer to your question really depends on the application
you are talking about and how it is written.


//David
http://w3-4u.blogspot.com
http://blogs.msdn.com/David.Wang
//