Configure communication timeout duration and retry attempts

By default, requests from a Citrix Receiver for Web site to the associated store timeout after three minutes. The store is considered unavailable after one unsuccessful communication attempt. Use the Session Settings task to change the default settings.


In multiple server deployments, use only one server at a time to make changes to the configuration of the server group. Ensure that the Citrix StoreFront management console is not running on any of the other servers in the deployment. Once complete, propagate your configuration changes to the server group so that the other servers in the deployment are updated.

  1. On the Windows Start screen or Apps screen, locate and click the Citrix StoreFront tile.
  2. Select the Stores node in the left pane of the Citrix StoreFront management console, select a store in the center pane, and in the Action pane, select Manage Receiver for Web Site, and click Configure.
  3. Select Session Settings, make your changes, and click OK/Apply to save the changes.

Configure the session timeout

If the session timeout is not appropriately configured on StoreFront, the users may see the following timeout message - “Your session has timed out due to inactivity.” You can reset the session timeout value to increase the inactivity timer to suit your users’ usage pattern.

Complete the following steps to configure the session timeout on StoreFront:

Increase the session timeout for StoreFront

  1. On StoreFront, navigate to c:\inetpub\wwwroot\Citrix<StoreWeb>.
  2. Locate the entry: <sessionState timeout="20" /> in the web.config file.
  3. Change the sessionState timeout to the desired value in minutes.

Increase maximum token lifetime of Authentication Service

If you increase the session timeout for the Citrix Receiver for Web to be more than one hour, you also have to increase the token maximum lifetime appropriately in the Authentication Service.

Increase session timeout for Citrix Workspace app

  1. For the Citrix Workspace app installed on the StoreFront Server, navigate to the path of your store’s auth service. In recent StoreFront versions, this path is c:\inetpub\wwwroot\Citrix\<Store>Auth (which could be one of several auth services depending on how many Stores you have).

    In older StoreFront versions, the path is c:\inetpub\wwwroot\Citrix\Authentication (which could be shared between auth services or be the only one on the server).

  2. In the web.config file, locate the entry: <defaultLifetime="01:00:00" maxLifetime="01:00:00">.
  3. Change the maxLifetime to desired value.


Citrix Workspace app for Windows and Citrix Workspace app for Linux. After logging out from the current session, you may see Citrix Virtual Apps and Desktops in the background. However, you should enter your credentials again when you click on any app or desktop after the StoreFront session timeout.

Increase authentication token lifetime

If the desired timeout value is greater than eight hours, edit the web.config file under Citrix Receiver for Web to increase the Authentication token lifetime:

  1. On StoreFront, navigate to c:\inetpub\wwwroot\Citrix<StoreWeb>.
  2. Locate the entry: <authentication tokenLifeTime="08:00:00" method="Auto" />
  3. Change the tokenLifeTime to a desired value.

Restart IIS

  • Run the iisreset command to apply the changes. Running this command logs off the users from Citrix Receiver for Web, and it does not impact their current ICA session.


The completed lifetime format is .d.hh:mm:ss[.ff]. The maximum lifetime is not limited to 24 hours.

Additional resource

Security Token Services API

Configure communication timeout duration and retry attempts