session timeout not working in mvc

Question

I have done this in my web.config.

<system.web>
  <sessionState mode="InProc" timeout="3"></sessionState>
  <authentication mode="Forms" >
    <forms loginUrl="~/Account/Login" timeout="2880"/>
  </authentication>

After session timeout it clears all the data, but it is not redirected to the login page.

Answer 1

Session timeout has nothing to do with authentication timeout - an InProc session is held in memory whereas the authentication token is a cookie which contains an expiry date/time.

What you would have to do is force the expiration of the authentication ticket in the Session_Ended event in the global.asax - see this answer on how to do that as it's not just as simple as calling FormsAuthentication.SignOut.