samesite cookie for SAML authentication

Hi

I'm using https://techdocs.f5.com/en-us/bigip-15-0-0/big-ip-access-policy-manager-per-request-policies/implementing-seamless-sso-azure-saml-mfa/azure-ad-creating-local-service-provider-main-authentication.html to setup and test

F5 SP

MS Azure iDP

and I am using F5 script for setting cookies (F5 APM / ASM) samesite attributes, basically https://community.f5.com/t5/technical-articles/irule-to-set-samesite-for-compatible-clients-and-remove-it-for/ta-p/278650

My issue is the return call from MS Azure is a 302 redirect back to the F5. the browser (Edge / Firefox) is not sending any of the F5 cookies.

I presume because MRHSession is not being sent a new session is being created which breacks the SAML auth.

I have samesite for this and all F5 to secure  / http only / samesite => lax

it looks like i need to set samesite to none for MRHsession

are other facing this problem if so how are you dealing with it - I am thinking of making this change just for my SP VS/domain

is there another solution ?