Having two urls
- secure.test.site.com/login/autologin
- secure.test.site.com/sessionlogin
First url is using virtual endpoint /login and second is using direct endpoint. Both are creating AUTHASPX session cookie but against different domain. secure.test.site.com/login/autologin for .secure.test.site.com domain and secure.test.site.com/sessionlogin for .test.site.com domain.
Why?