We're trying to implement SAP single sign on and include a CF
app as one that can be accessed via this SAP tool.
SAP is setting a cookie called JSESSIONID in the header and
then opens the CF app which also writes a jsessionid cookie (using
the same name 'jsessionid'). So now the cookie has two with the
same name. If the CF jsessionid is not first in the list CF does
not see it and does not retain session variables. If it is first in
the list CF does recognize it and retain session variables. I would
really like to be able to delete the SAP jsessionid cookie but have
tried and been unsuccessful. Also, would like to avoid having to
add the token to every cflocation. Any help out there?