We need to set up several different sites, or rather, different version of the same site, because of different site settings regarding SSL client certificates. Because they are actually the same site, they will use the same website directory on disc, and so web.config, machinekeys etc. will be the same.

Now, what we want to do is to redirect all users to the same "base site" (same URL) once they have passed the authentication and have been logged into each respective site, and naturally, we wan't them to stay logged even after redirection. To do this, we have modified the <authenticaion> in web.config to include domain like:

<authentication mode="Forms">
      <forms name=".DOTNETNUKE" protection="All" timeout="30" cookieless="UseCookies" domain="mydomain.com"/>
</authentication>

which seem to work well in the testing we have done so far.

But still, we would like some feedback if this is a safe way to do it, if there are better ways and if there are any DotNetNuke specifics to consider here?

Thank you!

Yes, this I know Was just conserned if this could have security drawback or similar, or perhaps DNN issues, especially for the "abandoned" DNN portal (we use Response.Redirect after successful login)?