# Reindirizzamento SSO infinito su Safari

**URL:** https://meta.discourse.org/t/infinite-sso-redirect-on-safari/110857
**Category:** SSO
**Tags:** discourseconnect
**Created:** [6 Marzo 2019, 1:08pm UTC](https://meta.discourse.org/t/infinite-sso-redirect-on-safari/110857 "2019-03-06T13:08:48Z")
**Posts on this page:** 1
**Showing post:** 6

<div class="post-metadata">

### Author: ![LeoMcA](https://sea3.discourse-cdn.com/meta/user_avatar/meta.discourse.org/leomca/32/87233_2.png) [@LeoMcA](https://meta.discourse.org/u/LeoMcA)
#### Post date: [8 Marzo 2019, 7:03pm UTC](https://meta.discourse.org/t/infinite-sso-redirect-on-safari/110857/6 "2019-03-08T19:03:48Z")

</div>

🤦‍♂️ I’ve spent a very long time figuring out a similar issue was caused by this `samsite=lax` behaviour:

[https://github.com/mozilla/discourse/issues/156](https://github.com/mozilla/discourse/issues/156)

> [@Falco](#):
>
> Maybe the [new Safari Tech Preview from today](https://webkit.org/blog/8658/release-notes-for-safari-technology-preview-77/) will fix it:

This fixes my issue - at least on macOS Mojave - so I assume it fixes it on iOS too. Thanks!

> [@fefrei](#):
>
> (I assume this is a defense-in-depth thing, on top of your usual CSRF protections, so disabling it is not overly terrible for security?)

I’d also like to know people’s opinions on this.

What with this being the _Mozilla_ Discourse and all, we don’t have a huge amount of traffic from Safari, so don’t want to make ourselves vulnerable to CSRF attacks for something which will benefit a very small proportion of our users.

---

_[View the full topic](https://meta.discourse.org/t/infinite-sso-redirect-on-safari/110857)._