We use claims based authentication and have one application running, say www.abc.com

This application authenticates against AD via claimns provider.

We would like to deploy another web site: www.xyz.com on the same farm and establish bi-direction single sign on. In other words, if I login into www.abc.com - when I navigate to any page on www.xyz.com - I'm logged in there.

Note - since it's two different web domains - cookies won't work - we also do not want to use redirection page - it seems that if we host both apps authenticating against the same AD - there should be very easy config in SharePoint to make this happen.

Any ideas?

  • Not sure SharePoint will do what you want here. Publishing the sites through a reverse proxy such as Forefront UAG, TMG, or ISA 2006/2004 will accomplish this.
    – shufler
    Commented Jan 6, 2012 at 19:37

1 Answer 1


You mention claims-mode and AD. Not sure if you are using ADFS or Integrated Windows Authentication, but it should be possible in both.

It is true that you cannot share cookies, but the identity provider should remember who you are and issue the appropriate auth cookie, subject to session expiration.

Your Answer

By clicking “Post Your Answer”, you agree to our terms of service and acknowledge you have read our privacy policy.

Not the answer you're looking for? Browse other questions tagged or ask your own question.