MYSAPSSO2 cookie found under request header and not in response header

[dchawla]

Hi there,

While testing the SPNego configuration by running the SAP URL in a browser, I observed that the SPNego Single Sign-On (SSO) functionality is working correctly. I am able to log in using my Windows credentials without the need to enter a username and password. However, upon inspecting the cookies in the network tab of Chrome's developer tools, I noticed that the cookie is present in the request header instead of the expected response header. It seems that the cookie placement is inconsistent, as sometimes it appears in the response header, but not consistently.
As per our use-case, we want the set-cookie under the response header. Can anyone help me on this?

SPnego configuration is done for Abap stack.

Regards,
Dhruv

MYSAPSSO2 cookie in Request Header:

MYSAPSSO2 cookie in Response Header:

image.png