That's not how that works. One common way here is OAuth2 which includes a callback URL such as: https://internal.yourcompany.com/oauth2/callback?token… https:/

That's not how that works. One common way here is OAuth2 which includes a callback URL such as: https://internal.yourcompany.com/oauth2/callback?token… https://internal.yourcompany.com/oauth2/callback?token… That token in the callback does not require any kind of cookie to use for subsequent authenticated calls.