I have a webserver that will be running an ASP.NET application and a WCF service. The ASP.NET application would require the user to log in before he/she can use the WCF service. I want to handle the sessions so that the user will be logged out automatically after a period of time. This is where I'm stuck, for the WCF application, I can check that the user is still using the system (i.e. the session gets updated every time the WCF application is called) but for the ASP.NET side, I'm just wondering how can I go about joining these 2 together. Because currently, the ASP.NET application would log the user off since what is happening after login doesn't touch the ASP.NET application which means that the user cannot access the WCF service. I want to know if I can manually handle the ASP.NET sessions so that I can use the same session table (as the WCF service) in the database. Thanks.

I have a webserver that will be running an ASP.NET application and a WCF service. The ASP.NET application would require the user to log in before he/she can use the WCF service. I want to handle the sessions so that the user will be logged out automatically after a period of time. This is where I'm stuck, for the WCF application, I can check that the user is still using the system (i.e. the session gets updated every time the WCF application is called) but for the ASP.NET side, I'm just wondering how can I go about joining these 2 together. Because currently, the ASP.NET application would log the user off since what is happening after login doesn't touch the ASP.NET application which means that the user cannot access the WCF service. I want to know if I can manually handle the ASP.NET sessions? Thanks.