Setup: Two sites (mysite.com & secure.mysite.com) in the same Umbraco installation. Secure.mysite.com has role-based restricted access.

I want to have a login form on mysite.com that navigates to and logs me into secure.mysite.com.

My problem is that the authcookie that is created, apparently is not accepted, because I am send to the login at secure.mysite.com, when i'm redirected.

I have the following entry in my web.config

<forms name="yourAuthCookie" loginUrl="login.aspx" domain=".mysite.com" protection="All" path="/" enableCrossAppRedirects="true" />

When i log in from mysite.com, it generates a cookie that belongs to the domain .mysite.com, but still sends me to the loginform for secure.mysite.com

It's the same login logic/method thats being called from both login forms.

if (Membership.ValidateUser(model.Username.Trim(), model.Password.Trim()))
            {

                FormsAuthentication.SetAuthCookie(model.Username.Trim(), true);

                if (Roles.IsUserInRole(model.Username, "Kunder"))
                    Logging.Instance.Info("Customer with user name: " + model.Username.Trim() + " logged in");

                if ((Roles.IsUserInRole(model.Username, "Administratorer")))
                    Logging.Instance.Info("Administrator with user name: " + model.Username.Trim() + " logged in");

                var nodeId = portalNode.Id;
                return RedirectToUmbracoPage(nodeId);
            }
            else
            {
                TempData["invalidLogin"] = true;
            }

Any ideas why this isn't working? Is this machinekey related?

I'll be glad to post more code if needed.