'Asp.Net Client Certificate Authentication - Issue with website re-prompting for client PIN

I have an ASP.NET 5 web application that is setup to use client certificate authentication, specifically a DoD CAC. I followed Microsoft's guidance (here) to setup the server and application to prompt for the client certificate. The implementation works except the website will prompt the user to re-enter their PIN at the 60 minute mark, which is not acceptable by the end user.

This particular application is intended for long use; approximately 8-12 hours at a time. The main application view displays a data table and uses JavaScript to fetch the data approximately every 60 seconds from an embedded web api controller (e.g. /api/xyz/123)

I'd like to adjust the rate at which the user is re-prompted for their PIN, but I cannot find any information on the topic. Like, what system is responsible for initiating the PIN prompt; a policy on the client certificate; a setting on the host server; or an application config setting?

I've had no luck tinkering with settings on the application or host server and cannot find any documentation on the topic. I would greatly appreciate any guidance.



Sources

This article follows the attribution requirements of Stack Overflow and is licensed under CC BY-SA 3.0.

Source: Stack Overflow

Solution Source