Cookie security: cookie not sent over SSL

Locate the Web.config file from the [IRC_InstallPath] /BizRightsPresentation.

Locate the roleManager xml node in the web.config file.

Add the attribute cookieRequireSSL to the roleManager xml node and the set the value to true.

For example,

<roleManager enabled="true"
                  defaultProvider="BizRightsRoleManager" cacheRolesInCookie="true"
                  createPersistentCookie="false" cookieProtection="All"
                  cookieRequireSSL="true">

.

Locate the forms xml node in the web.config file.

Add the attribute requireSSL to the forms xml node and set the value to true.

For example,

<forms name="BRCookie" loginUrl="BizRightsWarning.aspx"
                  protection="All" timeout="365" path="/" requireSSL="true" slidingExpiration="true"
                  />

.

Locate the httpCookies xml node in the web.config file.

Add the attribute requireSSL to the httpCookies xml node and set the value to true.

For example,

<httpCookies httpOnlyCookies="true" requireSSL="true"
                  />

.

Save the web.config file.