Absolute Expiration Policy

If you have strict security requirements, you can use an absolute expiration policy rather than a sliding expiration policy.

web.config

<configuration>
   <system.web>
      <authentication mode=”Forms”>
         <forms slidingExpiration=”false” timeout=”1” />
      </authentication>
   </system.web>
</configuration>