Hii , we have an implementation where 2 different ...
# support-questions-legacy
d
Hii , we have an implementation where 2 different app is using the same IDP , where for 1st application we are setting the cookies on main domain (ex.: abc.xyz.com) and for other 2nd application we are setting cookies on sub domain (ex: xyz.com) this is to differentiate the token access as 1st application we are fully using main domain. issue is when we login to the both app they work fine but when we logout of the 2nd app where we are using subdomain. it's deleting the cookies of xyz.com but idp is still able to access the fronttoken from the main domain (idp.xyz.com) and doesSessionExists is returning true. note: no Accesstoken or refreshtoken are present here. can you help us out on how to override the cookie access for doesSessionExists?