An OpenSearch dashboard SSO flow works on GET and fails

The IdP is correct, yet the session does not stick because the hardened cookie handling no longer matches the browser's cross-site POST behavior.