Addressing User has disabled cookies, or has lost the cookie before r…

…eturning from the SAML2 login server per https://access.redhat.com/solutions/7004299
adelton · Oct 7, 2024 · 7ec2a6a · 7ec2a6a
1 parent 0590e31
commit 7ec2a6a
Show file tree

Hide file tree

Showing 2 changed files with 10 additions and 0 deletions.
diff --git a/src/www-mod_wsgi-saml.conf b/src/www-mod_wsgi-saml.conf
@@ -36,6 +36,11 @@ Require all granted
     # Comment out the next two lines if you want to allow logins on bare HTTP
     # MellonsecureCookie On
     # SSLRequireSSL
+
+    # https://access.redhat.com/solutions/7004299
+    MellonSecureCookie On
+    MellonCookieSameSite none
+
     MellonUser "NAME_ID"
     MellonIdP "IDP"
     MellonSessionLength 3600

diff --git a/src/www-proxy-saml.conf b/src/www-proxy-saml.conf
@@ -26,6 +26,11 @@ ProxyPassReverse / http://app.example.test/
     # Comment out the next two lines if you want to allow logins on bare HTTP
     # MellonsecureCookie On
     # SSLRequireSSL
+
+    # https://access.redhat.com/solutions/7004299
+    MellonSecureCookie On
+    MellonCookieSameSite none
+
     MellonUser "NAME_ID"
     MellonIdP "IDP"
     MellonSessionLength 3600