Session Management

Once the user data is retrieved from the DB, the user is stored in IIS sessions in-memory object. The sessions in the application are configured to store data for 10 minutes (sliding expiration). If there are any requests made to the server during the last 10 minutes, session objects are distracted and authentication flow will resume on the next access to the DB.

The 'iisreset' command deletes sessions objects immediately.

Note: In HA/DR configurations, each IIS server stores the sessions in each server separately.