From c13b6e72060c71c4cfd54b3dd248898012e2cb61 Mon Sep 17 00:00:00 2001 From: Karuna Vengurlekar Date: Mon, 20 Jul 2026 14:27:27 +0530 Subject: [PATCH] Add new constant --- .../marketplace/platform-supported-content/modules/oidc.md | 5 +++++ 1 file changed, 5 insertions(+) diff --git a/content/en/docs/marketplace/platform-supported-content/modules/oidc.md b/content/en/docs/marketplace/platform-supported-content/modules/oidc.md index 8b80d180808..8736de20986 100644 --- a/content/en/docs/marketplace/platform-supported-content/modules/oidc.md +++ b/content/en/docs/marketplace/platform-supported-content/modules/oidc.md @@ -203,6 +203,7 @@ This section provides an overview of updates for the OIDC SSO module across diff | Mendix Version | OIDC SSO Module Version | Important Migration Changes | Additional Information | | --- | --- | --- | --- | +| 10.24.0 and above | 4.6.0 | - | New constant (`OIDC.NonceCookieSameSite`) has been introduced. | | 10.24.0 and above | 4.5.0 | - | New Admin UI and new constants have been introduced. | | | | | `Anonymous` module role has been removed. | | | | | Supporting multi-domain using constant. See [Configuring Multi-Domain](#multi-domain) for more information. | @@ -525,6 +526,10 @@ when you set **ClientAuthenticationMethod** as `private_key_jwt`, you do not nee * **EnablePKCE** (*default: True*) – enables Proof Key for Code Exchange (PKCE) +* **OIDC.NonceCookieSameSite** (*default: Lax*) – specifies the `SameSite` attribute for the OIDC nonce cookie, controlling when the browser includes the cookie during authentication requests. + + Example: `None` + ##### Deploy-Time IdP Configuration for API Security Only {{% alert color="info" %}}