This isn't a function of shared config. You're looking at passing authentication across domains. Easiest would be using Windows accounts and trusted domains, Kerberos may be an option as well. If this is Forms Authentication in ASP.NET you might post in the www.asp.net forums, there's a security forum there that might help.
Jeff
Look for Wrox's new book Professional IIS 7 in your local bookstore, or order now at
Amazon.com