This is my setup now – blogger wouldn’t let me add my code with the forms tags.

authentication mode=”Forms”
forms name=”app1″
slidingExpiration=”false”
protection=”All”
cookieless=”UseCookies”
timeout=”20″
loginUrl=”/ssl/Login.aspx”
path=”/”
defaultUrl=”Default.aspx”
/forms
/authentication

PartialAuthenticaionSystem

partialAuthenticationSystem
authentication timeout=”172800″ name=”.ASPXIDENTITY” /
authorization requireSSL=”None” requireLogin=”false” /
/partialAuthenticationSystem

I have a login control OnLoggedIn event set to this
protected void Login1_LoggingIn(object sender, EventArgs e)
{

PartialAuthentication.SetAuthCookie(this.Login1.UserName, false);

}

I am still losing the Context once I leave https – requireSSL is not set for either.

The partial authentication system uses forms authentication as its backbone, so that setting is correct. My first guess would be that you have RequireSSL set on your forms authentication. You should not have this set. This setting affects the basic forms authentication cookie, which you want to always transmit even over HTTP. The extra cookie created by the partial authentication system will require SSL regardless of this setting, so you’ll still be secure. If this doesn’t help let me know.

Brant

Do you have any examples of how to use PartialAuthentication static class to login and logout?

I am not sure if I am setting things right. When I check the AuthenticationType it is “Forms”.

I am still lossing the Context when switching back to http which I assume it is supposed to be populated by the insecure cookie…