Product Documentation

Configure session duration

Mar 09, 2016

Once authenticated, users can, by default, access XenDesktop, XenApp, or VDI-in-a-Box resources for up to eight hours without needing to log on again. By default, user sessions on Receiver for Web sites time out after 20 minutes of inactivity. When a session times out, users can continue to use any desktops or applications that are already running, but must log on again to access Receiver for Web site functions such as subscribing to applications. To change these settings, you edit the site configuration file.

Important: In multiple server deployments, use only one server at a time to make changes to the configuration of the server group. Ensure that the Citrix StoreFront management console is not running on any of the other servers in the deployment. Once complete, propagate your configuration changes to the server group so that the other servers in the deployment are updated.
  1. Use a text editor to open the web.config file for the Receiver for Web site, which is typically located in the C:\inetpub\wwwroot\Citrix\storenameWeb\ directory, where storename is the name specified for the store when it was created.
  2. Locate the following element in the file.

    <authentication tokenLifeTime="08:00:00" ... />

  3. Change the value of the tokenLifeTime attribute to set the time in hours, minutes, and seconds for which users, once authenticated to XenDesktop, XenApp, or VDI-in-a-Box can continue to use resources provided by that deployment.
  4. Locate the following element in the file.

    <sessionState timeout="20" />

  5. Use the timeout attribute to set the time in minutes for which a Receiver for Web site session can remain idle before the user is required to log on again to access the site.


The timeout of Receiver for Website is actually one minute before the value that is set.  If the value is set to 1 the timeout will be at 30 seconds.  Alerts will appear at the halfway point of the actual timeout for values set at 6 or less. For example, if the value is set at 4 the actual timeout will be 3 minutes and the alert will appear at 1 minute 30 seconds. For values 7 and higher, the alert will appear at 5 minutes.