Btw., to fully understand the problem, this piece of information was crucial:
If multiple cookies of the same name match a given request URI, one is chosen by
the browser.
The more specific the path, the higher the precedence. However precedence based
on other attributes, including the domain,
Hi Jigal and others,
I finally got around digging into this and found the solution is NOT the
cookieDomain setting. The essential goal is that the BE and FE login sessions
can be shared across the subdomains. Setting the cookieDomain like
/\.(sub1|sub2|sub3)\.domain\.com$/ allows cookies to be
