We've got a live published site with a forms cookie name of .ASPXFORMSAUTH, the default, but have realised that there may be conflicts with other web apps we might create in the future.
I was thinking that in the Application_Authenticate, I could, after the web.config has been changed to set the Forms cookie name to something else, say .ASPXWebApp1, I could look for the old cookie manually, and if it exists, create a ticket from the old cookie, spoofing the user to the authentication system, then let ASP take care of writing out the new cookie, etc. I could then manually delete the old cookie, so the process wouldn't happen again.
Is this possible? Any other advice/suggestions gratefully received !
...
Go to the complete details ...