4 ms·
Yup, that's precisely it. We documented the login breaks from Samesite and 3p cookies, but logout was both not particularly a concern for folks (I've gotten ab
by hirsin 6y ago
Yup, that's precisely it.
We documented the login breaks from Samesite and 3p cookies, but logout was both not particularly a concern for folks (I've gotten about three inquiries in two years), and pointless to document tombstoning patterns for Samesite since ITP would break those anyway.
https://docs.microsoft.com/en-us/azure/active-directory/develop/howto-handle-samesite-cookie-changes-chrome-browser?tabs=dotnet https://docs.microsoft.com/en-us/azure/active-directory/deve...
- alfu 6y agoIs the conclusion to just use use SameSite=None? I did some research while back and found that shibboleth supports local storage for sessions [0], unfortunately the IdP+SP I'm using do not support such a thing. [0] https://wiki.shibboleth.net/confluence/display/DEV/IdP+SameSite+Testing https://wiki.shibboleth.net/confluence/display/DEV/IdP+SameS...