网站整合之站点登录

 www.ocean.com 一个用户登录成功

blog.ocean.com 同一个用户会自动登录

 <authentication  mode = "Forms" >
                <forms
                    name = ".ASPXAUTH" [String]
                    loginUrl = "login.aspx" [String]
                    defaultUrl = "default.aspx" [String]
                    protection = "All" [All | None | Encryption | Validation]
                    timeout = "30"  [in Minutes][number]
                    path = "/" [String]
                    requireSSL = "false" [true|false]
                    slidingExpiration = "true" [true|false]
                    enableCrossAppRedirects = "false" [true|false]
                    cookieless = "UseDeviceProfile" [UseUri | UseCookies | AutoDetect | UseDeviceProfile]
                    domain = "" [String]
                    >
                </forms>
</authentication>

<machineKey  validationKey="AutoGenerate,IsolateApps"  decryptionKey="AutoGenerate,IsolateApps" validation="SHA1" decryption="Auto" />

两个站点的web.config  "domain"值、machineKey  要相同; 找相同的cookies名字进行判断