...
Once a user has been authenticated they will have a long-lived session with the IdP which is tracked by a cookie named _idp_session
. This cookie contains only information necessary for identifying the user's IdP session. This cookie is created a as "session" cookie and will be removed when the browser chooses to remove such cookies (often when the browser is closed).
...