There was a bug in Safari around samesite=lax cookies:
I’m not 100% sure, but I think you can work around the issue by asking users to visit the /login page first, and then use the login button to initiate the SSO flow.
3 Likes