KB43022: ASP.NET session timeout setting is not active when cookies are disabled in MicroStrategy Web 9.4.1 and above.

SYMPTOM
Inside Internet Information Services (IIS) Manager there is an option to disable cookies for a specific application. If cookies are disabled for Strategy application and at the same time the time out settings are set to a specific time, the timeout configuration will not be taken into account. 
 
STEPS TO REPRODUCE

• Set cookieless parameter to 'true' in the Configuration Manager.
  

• Increase the session timeout from 20 min to 2:00 hours. 
   
  

• When the session is tested, the session still times out after 20 minutes. 

CAUSE
This behavior is by default and expected. This is not a Strategy specific behavior. IIS requires the application pool time out to be increased as well. In this case, we have to increase it to 2:00 hours as well. Otherwise, it will timeout after the default 20 minutes, since the worker process will shut down and kill all connections.
 
ACTION
Increase the application pool timeout to the same value you set the session timeout.

• Navigate to Application Pool Advanced Settings
• Under Process Model section, increase the timeout value to 2:00 hours.