On 11/1/07, Paul Cowan <[EMAIL PROTECTED]> wrote: > The behaviour I want is for the second tab to require authentication but I > guess the session and the cookie are shared across all tabs in the browser.
Yep. > Is there anyway to set the formsauthentication config to require > authentication on each tab? It works cookieless but this is not the > behaviour I want. Only by storing the authentication ticket somewhere other than a cookie. There are two other options: 1. In a hidden form input (which would mean requiring every interaction with the server to be a post). Some online banking systems do this. 2. In the query string - which is the behaviour of the cookieless setting. There's no-where else to store this. Cookies,QueryString and Form's are your three options. j. =================================== This list is hosted by DevelopMentorĀ® http://www.develop.com View archives and manage your subscription(s) at http://discuss.develop.com