Hi karh
I am facing the same issue, trying to maintain login on sub-domain when logged in on main domain, I am getting the same response as siteSecurity false and no siteSecurityId in the session cookie shared from main domain.
I have setup the session domain in config.json and same name of security provider in both main domain and sub domain
How did you solve this issue ?