Third-party-cookie SSO with Azure AD integration Problem

1

Hello everyone , I’m having an issue with Single Sign-Out in an SSO setup and would appreciate any guidance. We have an application that authenticates users via SSO using OIDC with Azure AD, and Keycloak is used as the identity broker. From our application, users can also open Microsoft 365 through this same SSO session. The issue happens during logout. When a user signs out from our application, Single Sign-Out works correctly in Chrome and Microsoft Edge — the user is logged out of all related sessions. However, in other browsers (such as Firefox or Safari), the user remains signed in to Microsoft 365 or Azure AD, meaning the SSO session is not fully terminated. I suspect this may be related to third-party cookie restrictions in those browsers.