opensaml - cookie SameSite

[Woerle.Andreas at swisscom.com]

Hi everyone,


we noticed that upon login with the idp - additional to the session cookie - there is a cookie starting with "_opensaml_req" which has SameSite set to "none".

For the session cookie we already managed to configure it to set SameSite to "lax", and we would like to do the same for this opensaml-cookie. But couldn't yet figure out how.


Any help would be appreciated.


Andreas
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://shibboleth.net/pipermail/users/attachments/20210224/0e2e1778/attachment.htm>