Chrome 83 have disabled Third Party Cookie in Incognito, and are looking to implement in the standard browser in Jan 2022. I'm looking for options around handling these requests which currently fail with Third Party Cookies disabled (In Firefox as well).
We have a website abcd.com that redirects to adfs.xyz.com and authenticates users on ADFS 4.0 and then takes the user back to abdc.com. This works successfully, but when we request content from content.xyz.com (Cross Site) it fails at adfs.xyz.com ADFS page with an "Refused to display https://adfs.xyz.com/adfs/ls/'in a frame because it set 'X-Frame-Options' to 'deny'"
Some of my thoughts where to do a URL Transform (rewrite) on the ADFS server and or Content Server, but I feel the requests from abcd.com to xyz.com would not be rewritten.
Is there a way to have multiple domains in the header of ADFS?
Or does the website need to be re-written without iFrames?