Skip to main content

Hi, we have an issue with Intercom cookies. We've observed this situation:

 

  • Intercom runs in our website (e.g. https://webapp.customer.com.
  • Intercom creates a session cookie for subdomain (.customer.com).
  • The cookie is included in all requests for our website pages.

 

In some cases, the cookie can contain values similar to "0xABC". In these cases, we've seen at least one Azure cloud server reject all requests that include this cookie. Apparently, by including a text similar to "0xABC" the request is considered suspicious by Azure.

 

The result is that this breaks our website, and the only way to continue accessing the site is to delete the cookies.

 

So I wanted to ask:

 

  • Is is possible to configure intercom so that the format of the intercom cookie is different (e.g., an hex string that never includes "0x").
  • Is it possible to specify the value of the intercom session cookie?

Hey @user1945​ Racheal from the support engineer team here 👋

 

I see you are working with my teammate Mark to get this sorted. Once we have an update we can post the outcome here for future viewers. 👍


Reply