The EnableSessionExpiration setting should be set in the web.config file as a best practice. What this means is that the Web Client session times out after the time specified in web.config has passed. If this is not set, the session remains open as long as the Web browser is left open on the user machine. When a user session times out, the user is directed to a screen indicating this.