Re: [saml-dev] SameSite cookie support and HTTP-POST binding

["Cantor, Scott" <cantor.2@osu.edu>]

On 7/19/19, 9:22 AM, "Peter Major" <peter.major@forgerock.com> wrote:

> Are there any best practices (implementation advices) available for 
> keeping HTTP-POST binding working even when the session cookies have 
> SameSite Lax flag? (or Strict flag and HTTP-Redirect binding?)

Don't use cookies for relay state.

-- Scott