Separate Access Profiles for Different URIs on the Same Domain

Hi,

On the all Access policies involved, have you enabled profile scope "Global"?

This setting prevents a malicious user from establishing a session using one virtual server, and then using that same session to access, potentially without further authentication, another virtual server and the resources behind it.

Profile Gives a user access only to resources that are behind the same access profile. This is the default value.

Virtual Server Gives a user access only to resources that are behind the same virtual server.

Global Gives a user access to resources behind any access profile that has global scope

This might be a quick fix by allowing authorisation to be shared, otherwise it will need a fair bit of plotting out and debugging..

John