IIS Module Intermittently Failing to Query Daemon over a TCPListener for Session Information

[Nate Klingenstein]

The application in question uses iframes extensively and the browser traces from clients show the OpenSAML cookie being set with SameSite None, but without a secure flag.  For the clients that successfully login, the OpenSAML cookie is being set and sent successfully, but it's not in the clients that are failing.

The only cookies that are sent in the request to the login page after SAML processing by the looping clients are all set as SameSite None and Secure.

So, is it plausible that this is a SameSite issue and that the proper fix is that cookieProps needs to be set to "https" and a new sameSiteSession attribute needs to be added with a value of "None" to the session element?

Other than issues with older versions of Safari(and way deprecated browsers), is there any potential adverse impact from changing these settings?  I can't think of any.