Haven’t found a way to reliably reproduce it but from time to time the session does not time out even if the according TimeOut property is set. Should I still report it or will it get closed (as not reproducible) anyway?
Is this issue known? I have it used in one app to track working time, so a timeout is very important in that case - and a workaround highly welcome 
There is some confusion about what the TimeOut property is for. Just to clarify, it is the number of seconds a users browser can sit idle, without mouse or keyboard movement, before the Session.TimedOut event fires.
Can you give more detail of what you are expecting?
It is exactly that, yes. E.g. when a employee goes for lunch but forgot to log out, it should time out and close the session after a couple of minutes.
Ok. So when the Session.TimedOut event fires, you need to redirect the user away from the app to let the session die. Otherwise the browser keeps communicating with the server and keeps the session alive.
Well, in fact i destroy the session in the timeout event. That is not enough?
Not necessarily. It’s better to point the browser somewhere else. A simple HTML page that says “you have been logged off” but is not part of your app would suffice.
Okay, gonna try it.