No such flow exception help

[Cantor, Scott]

On 8/9/22, 3:26 PM, "users on behalf of Wessel, Keith via users" <users-bounces at shibboleth.net on behalf of users at shibboleth.net> wrote:

>    I'm not sure why this isn't happening with our proxying to ADFS but it is to
> AzureAD. Different headers from Microsoft's cloud servers, perhaps?

Common domain.

> For proxying situations like this, the only solution is to enable the samesite
> filter, correct?

Or get people to dump Chrome and Edge, because this isn't the last time they're going to pull this. It's still not an RFC, last time I checked. That should scare everyone.

> And if we don't want to make users with older browser suffer, we'll need to
> come up with the user agents for which we want it to fire? Just making sure
> there's no other option before I go down this road.

None I know of.

-- Scott