__host-jsessionid changes inappropriately

[Cantor, Scott]

Make sure you're on 5.1.3, but you'd need to trace it and determine if SameSite=none is actually being set or not and what cookie(s) the browser actually accepts. There are plugins all over that help with that.

If you're not on 5.1.3, don't waste your time until that's addressed.

> In our idp-properties configuration we have the following 
> properties configured 
> idp.cookie.sameSite = None 

That doesn't set SameSite, it tells it what to set it to if the sameSiteCondition property next to it is actually set to something that evaluates to true.

-- Scott