Hi,
I have a main website and a few subdomain-portals. If a user signin to one of the subdomain portal, he/she should be able to access other subdomain portals without needing to re-authenticate.
For example:
if the site is www.mysite.com
and the subdomain portals are
dallas.mysite.com
newyork.mysite.com
albany.mysite.com
then a use who has authenticated himself on dallas.mysite.com should be able to access newyork.mysite.com without reauthenticating himself. So the authentication cookie as domain based to mysite.com.
I'm wondering if its a good idea, what could go wrong?
Thanks.
...
Go to the complete details ...