Achieving Single-Sign-On (APGvNext (Sam))

Mon, 04 Aug 2008 17:43:13 GMT

You need to enable cookie based forms authentication for your site, as the forum uses forms authentication cookie to recognize logged in users. Single Sign On depends on the presence of forms authentication cookie.

In addition, you need to make sure that in both web.config files:

forms authentication cookie's name, protection, path are the identical.
you have identical machine key (validationKey, validation, decryptionKey)
1. Get your machine key if you don't have one yet.

That's it. It shouldn't take more than 5 min to do the above.

Alternatively, you can read this article on creating a custom Forms Authentication Cookie for forum if your site configuration does not allow the above.

Sharing Forms Authentication Cookie is tricky among app/sites on different ASP.NET frameworks (specifically between .NET 4.5 and any earlier version). A surefire way is to specify machine key compatibility mode in web.config:

<machineKey compatibilityMode="Framework20SP1" />

More info: http://blogs.msdn.com/b/w...-asp-net-4-5-pt-2.aspx