We're scratching our head on this. Environment: .net4/SQL2008 R2, VS2010 webforms.
In our root web.config, we have the basic forms auth. Roles are disabled.
<authentication mode="Forms">
<forms cookieless="UseCookies" loginUrl="~/Login.aspx" timeout="60" />
</authentication>
In the protected folders in the application, we have the deny unauth'd users in a web.config:
<?xml version="1.0"?>
<configuration>
<system.web>
<authorization>
<deny users="?" />
</authorization>
</system.web>
</configuration>
This all works fine except in IE when you have more than one IE window/tab open. If I have an IE window/tab open (on any site) and I log into the application, I get a redirect back to login with the following in the URL bar. This w ...
Go to the complete details ...