Third-level domains.

What needs to be changed in order for authorization to be active for the second-level domain, as well as for all third-level subdomains?
I don't want people going to subprojects to re-log in to each of them.