Here is my problem.. I am working in a uni and we have multiple sites (on the same server) requiring authentication. We simmply cannot afford to purchase a cert for each site (domain and separate IP), so my solution was to created a single site with a cert which has the other sites available as virtual directories, Authentication would be performed via ssl and then the user would be redirected (using cflocation) back to the insecure site along with the session (cfif, cftoken) appended to the URL, however when I do this I cannot see the session variables established during authentication even though the cfid and cftoken are the same ....
Any ideas how I can acheive this ? ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~| Adobe® ColdFusion® 8 software 8 is the most important and dramatic release to date Get the Free Trial http://ad.doubleclick.net/clk;203748912;27390454;j Archive: http://www.houseoffusion.com/groups/CF-Talk/message.cfm/messageid:312843 Subscription: http://www.houseoffusion.com/groups/CF-Talk/subscribe.cfm Unsubscribe: http://www.houseoffusion.com/cf_lists/unsubscribe.cfm?user=11502.10531.4

