Multisite Persistent Login

I’m looking to get a fairly fool-proof way to have users logged in throughout all sites of a network, though not sharing publishing permissions and such.

What is the smartest way to do this?