Cookie inventory

Necessary cookies support login, security and company context. Analytics cookies are optional and require consent. Use Cookie preferences to change your choice.

Cookie type	Category	Purpose	Expiry	Strictly necessary?	Requires consent?
`Authentication cookie`	Authentication	Forms authentication cookie used to keep signed-in users authenticated.	Session or persistent when remember-me is selected.	Yes	No
`Authentication cookie`	Authentication	Database-backed authentication session token. The database stores a hash; the browser stores the raw session token.	Session or persistent when remember-me is selected.	Yes	No
`Authentication diagnostics cookie`	Authentication diagnostics	Short-lived marker used to detect whether a sign-in cookie was rejected by the browser or hosting environment.	Up to 5 minutes.	Yes	No
`Company context cookie`	Company context	Protected current company selection for tenant context.	Session.	Yes	No
`Security cookie`	Security	ASP.NET anti-forgery cookie used to protect forms from cross-site request forgery.	Session.	Yes	No
`Security cookie`	Security	Protected temporary MFA sign-in state while an authenticator code is being verified.	Short-lived sign-in flow cookie.	Yes	No
`Security cookie`	Security	Protected temporary MFA setup state while an authenticator app is being configured.	Short-lived setup flow cookie.	Yes	No
`Security cookie`	Security	Protected MFA verification marker for the current authenticated session.	Session or persistent when remember-me is selected.	Yes	No
`Session cookie`	Session	ASP.NET session cookie used for sign-in, MFA and current company context.	Session.	Yes	No