CODEWITHSUNDEEP
safarisession-cookiessamesitesiteminderbroadcom
Rajeev Nair
Rajeev Nair

Reputation: 759

Siteminder and SameSite Cookie attribute

We are using CA Siteminder as our IdP and for SSO, which creates the SMSESSION cookie. It is also setting SameSite=None and Secure attributes.

All browsers are cooperating except older versions of Safari (like 12.x). This seems to be a known issue. And CA has a documented fix for this with one of their patches.

We applied the samesiteincompatibleuseragents setting with the value of "browser=Safari|MajorVersion=[1-13]", which was the fix Broadcom (CA) is recommending.

But this fix doesn't seem to work.

Any ideas are welcome.

Upvotes: 0

Views: 910

Answers (1)

Rajeev Nair
Rajeev Nair

Reputation: 759

Well, after a couple back and forth discussion with Broadcom, they told us that Version number specified for Safari is WebKit version and not the browser version. We changed the setting to "browser=Safari|MajorVersion=[538-605]" to find the sweet spot.

This setting worked for us.

Upvotes: 0

Related Questions