4,151 questions
JSESSIONID cookie is not getting sent in requests in Teams Ecosystem.
![](data:image/svg+xml, %3Csvg xmlns='http://www.w3.org/2000/svg' height='64' class='font-weight-bold' style='font: 600 30.11764705882353px "SegoeUI", Arial' width='64'%3E%3Ccircle fill='hsl(70.4, 8%, 16%)' cx='32' cy='32' r='32' /%3E%3Ctext x='50%25' y='55%25' dominant-baseline='middle' text-anchor='middle' fill='%23FFF' %3ECS%3C/text%3E%3C/svg%3E)
Chavan, Shubhangi
0
Reputation points
In Teams tab app we are loading our web app url. But some of application services are failing, which are session dependent. This is because JSESSION cookie is not getting sent in the request. Am I missing any configuration?
Microsoft Teams | Development
{count} votes
-
![](data:image/svg+xml, %3Csvg xmlns='http://www.w3.org/2000/svg' height='64' class='font-weight-bold' style='font: 600 30.11764705882353px "SegoeUI", Arial' width='64'%3E%3Ccircle fill='hsl(176, 78%, 27%)' cx='32' cy='32' r='32' /%3E%3Ctext x='50%25' y='55%25' dominant-baseline='middle' text-anchor='middle' fill='%23FFF' %3EPM%3C/text%3E%3C/svg%3E)
Prasad-MSFT 9,061 Reputation points Microsoft External Staff Moderator2023-07-11T10:48:35.8333333+00:00 Could you please provide more details on your issue?
-
Chavan, Shubhangi 0 Reputation points
2023-07-11T13:54:17.4+00:00 Application JSESSIONID cookie is not getting sent in requests in TEAMS ecosystem because of samesite=lax. Making sameSite=none is not secured option. Does Microsoft TEAMS provide any configuration where it can allow our domain so cookies will be added in requests sent from that domain in TEAMS.
-
Chavan, Shubhangi 0 Reputation points
2023-07-11T14:01:36.6533333+00:00 Application JSESSIONID cookies are not getting sent in requests form our domain in TEAMS environment because of sameSite=lax. Making sameSite=none to send cookies is not the secured way. Does Microsoft TEAMS provide any way of configuration where we can add our domain so cookies will be sent in requests from that domain.
-
Prasad-MSFT 9,061 Reputation points Microsoft External Staff Moderator
2023-07-13T14:03:50.16+00:00 Thanks for detailed explanation. We have informed engineering team about this issue. We will update this thread once we get any further info from them. Thanks!
-
Prasad-MSFT 9,061 Reputation points Microsoft External Staff Moderator
2024-07-15T12:32:49.7366667+00:00 Microsoft Teams does not provide a direct configuration option to add your domain so that cookies will be sent in requests from that domain. However, one approach is to Set-Cookie header with "Secure " and "SameSite=none", x-frame-options header valued "ALLOW-FROM https://teams.microsoft.com", Content-Security-Policy="frame-ancestors teams.microsoft.com *.teams.microsoft.com etc."
This combination allows cookies to be sent in requests originating from any domain, but only over secure HTTPS connections, which adds a layer of security.
Sign in to comment
Sign in to answer