SSO and OpenID login issues
Unable to log in with an SSO/OpenID setup
In your Tomcat configuration, make sure that the CookieProcessor
component doesn’t have the sameSiteCookies
property set to strict
.
Instead, set the property to Lax
:
<CookieProcessor sameSiteCookies="Lax" />
This supports OpenID top-level redirects while maintaining decent protection against Cross-Site Request Forgery (CSRF).