ADFS Cookie Handling Issue with SamlSession
I'm experiencing issues with ADFS cookie handling. After creating a Relying Party Trust, everything seemed to work fine initially. However, when calling ADFS repeatedly with the same user, the SamlSession cookie size gradually increases, leading to a 400 error with the message: "Header field too long."
Upon inspecting the headers, I found multiple SamlSession cookies (SamlSession, SamlSession1, ..., SamlSession7). The first SamlSession cookie contains user information and some UUID, while the others consist of concatenated UUIDs separated by the &
symbol, which I believe refer to assertion IDs.
What steps can be taken to resolve this issue?