This browser is no longer supported.
Upgrade to Microsoft Edge to take advantage of the latest features, security updates, and technical support.
![](data:image/svg+xml, %3Csvg xmlns='http://www.w3.org/2000/svg' height='64' class='font-weight-bold' style='font: 600 30.11764705882353px "SegoeUI", Arial' width='64'%3E%3Ccircle fill='hsl(268.8, 42%, 36%)' cx='32' cy='32' r='32' /%3E%3Ctext x='50%25' y='55%25' dominant-baseline='middle' text-anchor='middle' fill='%23FFF' %3E1%3C/text%3E%3C/svg%3E)
what is the purpose of the following cookies we see from login.microsoft.com.
Hello @15190258 , thanks for reaching out.
brcap is used to detect whether the browser have touch capabilities or not. clrc is used by the clients (browser) to identify the resource that have already been fetched. Let us know if you need additional assistance. If the answer was helpful, please accept it and complete the quality survey so that others can find a solution.
Thank you alfredorevilla, for the response
As a follow up question, is there a way to set these as httpOnly cookies ?
Hello @15190258 , brcap and clrc are used by the browsers so they cannot be flagged as httpOnly.
![](data:image/svg+xml, %3Csvg xmlns='http://www.w3.org/2000/svg' height='64' class='font-weight-bold' style='font: 600 30.11764705882353px "SegoeUI", Arial' width='64'%3E%3Ccircle fill='hsl(265.6, 8%, 35%)' cx='32' cy='32' r='32' /%3E%3Ctext x='50%25' y='55%25' dominant-baseline='middle' text-anchor='middle' fill='%23FFF' %3ESD%3C/text%3E%3C/svg%3E)
Is there any microsoft documentation around these cookies ?
Hello, no there's none but I will reach the AAD documentation team to suggest it.