ADF Security Across Multiple WebLogic Managed Servers

While working with ADF Security I have noticed interesting behavior - if multiple applications are deployed on the same Managed Server, its enough to authenticate and authorize once and then security context will be transfered to another applications (something similar to Single-Sign-On). However, if same applications are deployed on different Managed Servers - user will be asked to enter login credentials again. Let's show this by examples.

I have created Countries application, where I have defined developer and support Application Roles:

Second application - Locations, contains only developer role:

I have configured two managed servers - dev1 and dev2:

Countries application is deployed on dev1:

While Location application is deployed on dev2:

Now I login into Countries with user scott/welcome1:

Both authentication and authorization is successful:

From the same Web browser session I open second application called Locations, and I will be asked now for username and password again:

Let's change target deployment for Locations application to dev1, same target where Countries are deployed:

Now Locations will be opened within the same browser session without asking to provide username/password again:

If I would try to login into Countries with another user, who is assigned with support role, but not developer role:

I will get authorization error while trying to open Locations: