<configuration> <location path="App1"> <system.web> <machineKey validationKey="KEY_FOR_APP1..." validation="SHA256" ... /> </system.web> </location> <location path="App2"> <system.web> <machineKey validationKey="KEY_FOR_APP2..." validation="SHA256" ... /> </system.web> </location> </configuration>
When a user logs into an ASP.NET application using Forms Authentication, the server issues a cookie containing an authentication ticket. This ticket asserts the user's identity.
