I use Entra, so the session cookies are created through login.microsoft.com. Which means I'm not actually managing the session. When I said I don't use session

I use Entra, so the session cookies are created through login.microsoft.com. Which means I'm not actually managing the session. When I said I don't use sessions, I should have specified I don't use them for application state (or roles and stuff).