Single sign-on

Astoria

Garbage Collection

Identity and principal

Tools

Cultures supported

Between multiple applications:

Modify web.confid as ..

<authentication mode="Forms"  >
  <forms name="test" loginUrl="/Login.aspx"  timeout="30" path="/" domain="mydomain.com"   />
</authentication>

also when the cookie(forms authenticated token) is travelling across subdomains ... make sure we use same encrypyion and decryption keys  .

<machineKey validationKey="ACF........................."  

decryptionKey="FCA........................"  />

 

 

Between multiple websites:

Here we have to be able to maintain synchronous cookie data across all the websiteDomain's cookies.

So for ex: janaganamana1.net    , janaganamana2.net , janaganamana3.net , janaganamana4.net all need to be logged in when user logs in one domain.  So this happens by using redirect URLs with returnURL.

 

SO 

if usergoes to janaganamana1.net/securepage.aspx ---

1) naturally user will be redirected to  janaganamana1.net/securepage.aspx janaganamana1.net/login.aspx

2) after credebtials are entered, user needs to redirected to securepage.aspx(on having validated credentials to success)

3) intead of steps2 above redirecting to janaganamana1.net/securepage.aspx , it will redirect (response.redirect) to janaganamana2.net/someotherSecurepage.aspx(posting the credentials) which will fill cokies of that page on ...so on forjanaganamana3.net , janaganamana4.net ... and finally redirected to returnURL.