opensaml - cookie SameSite

[Cantor, Scott]

On 2/24/21, 4:51 AM, "users on behalf of Woerle.Andreas at swisscom.com" <users-bounces at shibboleth.net on behalf of Woerle.Andreas at swisscom.com> wrote:

>    we noticed that upon login with the idp - additional to the session cookie - there is a cookie starting with
> "_opensaml_req" which has SameSite set to "none".

That's by design, it has to be communicated back at the final site transfer step, and that's a POST.

-- Scott