Re: [saml-dev] SameSite cookie support and HTTP-POST binding

On 7/19/19, 9:22 AM, "Peter Major" <> wrote:

> Are there any best practices (implementation advices) available for 
> keeping HTTP-POST binding working even when the session cookies have 
> SameSite Lax flag? (or Strict flag and HTTP-Redirect binding?)

Don't use cookies for relay state.

-- Scott