MENU
Users report the following about access to an application:
Inconsistent behavior depending on the browser used
Denied access
Prompt to accept a security exception
Which configuration option should the administrator adjust?
Modern browsers enforce stricter cookie handling rules. If cookies are not configured correctly with the SameSite attribute, behavior can differ across browsers, leading to inconsistent authentication and access denials. Security exceptions may appear when session cookies are blocked.
Exact Extract:
''The SameSite cookie setting defines how browsers send cookies in cross-site requests. Misconfigured SameSite values can lead to inconsistent application behavior across browsers.''
Option A (Enable PKCE) is related to OAuth flow security, not browser cookie behavior.
Option B (SameSite Cookie) is correct --- this directly explains the inconsistent browser issues.
Option C (Request Preservation) ensures query parameters are kept, not related to cross-browser session handling.
Option D (Validate Session) checks session state but does not address browser inconsistencies.