...
In addition to the new SameSite Servlet Filter described here, a DynamicResponseHeaderFilter callback function has also been implemented (SameSiteCookieHeaderCallbackFunction). The implementation can be found on my personal repository [git@git.shibboleth.net:philsmart/java-support] feature branch [feature/same-site-filter] - alongside the existing Filter implementation. The callback function works in the same way as the filter, but requires less changes to the IdP to deploy.
Configuration
The function can be configured in global-system.xml, by defining both the function bean, and adding it to a new list of response header call backs.
...