If i configure `framework.session.cookie_samesite: 'lax'` SSO with Azure as SAML IDP do not work anymore. Is there any way to say, send the session cookie only to the SAML IDP or is the only solution set `framework.session.cookie_samesite: 'none'` ?