https://ory-community.slack.com/archives/C010F2N7XR9/p1671478009982139 How does this work? Does Ory set multiple cookies?

You will have to login at both sites individually, but the credentials and your user account are the same.

So the sites can’t share the same login url? If you are logged in on one site, are you also logged in on the other?

If you are logged in on one site, are you also logged in on the other?

No, that’s not possible currently because cookies are bound to one specific domain. You need to login on each domain individually, but they share the same account “in the background”. So any password change or username change or similar will affect both domains.

Yes, we were discussing that here: https://ory-community.slack.com/archives/C010F7Z4XM1/p1669724060807649 Ideally if the user was logged in on one site. Even if you have to redirect them through to the login flow on the other site, they would be able to skip filling in the credentials (similar to what you can do with Hydra).

Precisely. With Ory Network, you get a fully configured integration between Hydra and Kratos, and can achieve this right now with OAuth2. Do do this fully cookie-based (Kratos only) requires (as you said) some creative redirection logic, but I haven’t thought about it enough to say how difficult it will be.