Cookie value changing on mfa

Architecture
, ,
#1

Hi Experts.
The use-case is, am logged in to the portal authenticated through AM which created an iplanetDirectorycookie.Later user visits some secured sites which required to go though MFA after mfa success the cookie value is being updated changed/updated, which I don’t want. How to mitigate this issue? pls advice.

thanks

#2

The session cookie changes to protect against session fixation attacks, there is not much you can do about it.