Comments by Member 12756784 (Top 1 by date)

Our servers that the client is sending the request to retrieve a SSO URL is setting the cookie and session info. We are sending this back to the browser that is being used to initiate the session. I don't believe the client's web app is attempting to read the cookies, but we expect their redirect request to contain the same cookie information that we sent back to them.