Skip to content

Is there a suggested method for dealing with browsers disallowing third party cookies without disabling cookies altogether? #2320

Open

Description

We have an angular application using Application Insights that we're displaying on another site via an iframe and both Chrome and Firefox are warning that in future versions they will be dropping support for third party cookies and blocking the ai_user and ai_session cookies entirely.

Screenshot from firefox:
application insights cookie error

Chrome:
image

We have this same issue with our identity related cookies on this embedded site, but we could fix that by adding the Partitioned attributes to our cookies (google docs, mozilla docs) when they're initially written, but it doesn't seem like Application Insights has hooks for that currently

Is there any guidance on how we can handle this now or any features in the pipeline that would allow us to handle this situation without disabling the user tracking cookies entirely?

Steps to Reproduce

  1. Host two sites with different domains (A, B)
  2. Set up application insights on site B
  3. Display site B within site A via an iframe
  4. See warnings in latest versions of Firefox and Chrome with default security settings
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Metadata

Assignees

No one assigned

    Type

    No type

    Projects

    No projects

    Milestone

    No milestone

    Relationships

    None yet

    Development

    No branches or pull requests

    Issue actions