Hi LisaCray, have you been able to solve it? i see the same.

@LisaCray

For me it seems to work, i mean setting the setting in the correct way.

I am just working on this but looking at https://cloud.google.com/docs/chrome-enterprise/policies/?policy=LegacySameSiteCookieBehaviorEnabledForDomainList
It seems like one needs to pick one key or the other. We are looking at using the

LegacySameSiteCookieBehaviorEnabledForDomainList

key and filling the array like:

    <key>LegacySameSiteCookieBehaviorEnabledForDomainList</key>
            <array>
                <string>www.example.com</string>
                <string>[*].example.edu</string>
            </array>

My wild guess is that on macOS the second key overrides the first one (being more restrictive) and you are not providing an array but a simple bool so just sees that there is nothing on the allowed list. That said I am still testing to see if I can get a working profile for JAMF to deliver and I could be wildly wrong :-) and if anyone has better info please post. I was hoping that Profile Creator.app would have this setting which is under the Content Settings group but it does not.

@ega I'll see about getting this added soon to ProfileCreator, just have a lot of different things going on ATM. I hadn't kept up with Chrome development, but this is applicable for us too. Thanks for the info & the PR

Thank you for thour insight, @ega

I guess I read it differently. I was thinking...

The "LegacySameSiteCookieBehaviorEnabled" (boolean) option would need to be enabled (1/YES/TRUE)

and THEN you defined the domains to enable in the second (array) option.

<key>LegacySameSiteCookieBehaviorEnabledForDomainList</key>
    <array>
    <string> [*.]my-intranet-domain</string>
    <string> [*.]my-external-domain</string>
    </array>

I'm still not sure how these 2 policy settings correspond to the manual flag options in Chrome (see screenshot).

Thoughts?

@dstranathan that was my thought as well. Have to set the enable pref first in order to respect the domain list

After testing, it appears the first option ('LegacySameSiteCookieBehaviorEnabled') is an integer, NOT a boolean. This value must be '1' or '2':

1 = Revert to legacy SameSite behavior for cookies on all sites
2 = Use SameSite-by-default behavior for cookies on all sites

If more granular controls are needed on a per-domain basis, then the array ('LegacySameSiteCookieBehaviorEnabledForDomainList') must be configured.

Clear as mud!

Yeah and my understanding was incorrect. LegacySameSiteCookieBehaviorEnabled with a value of '1' does not require the domain list preference, because it just reverts the cookie behavior on all sites. LegacySameSiteCookieBehaviorEnabledForDomainList is for when you want to be more selective about legacy cookie behavior. But both can be used together.

ProfileCreator has been updated, so you can quit & reopen to see these added preferences for Chrome

@dstranathan in your testing if only LegacySameSiteCookieBehaviorEnabledForDomainList is populated with a domain list is there any need for LegacySameSiteCookieBehaviorEnabled at all? It looks like just populating the array implies the same as LegacySameSiteCookieBehaviorEnabled with an int value of 1 but restricted to the sites listed in the array. Hoping you see thru mud better than I do...

Heh, never mind @aporlebeke has a good description in the new preference for Chrome in Profile Creator

Cookies set for domains matching these patterns will revert to legacy SameSite behavior. For cookies on domains not covered by the patterns specified here, or for all cookies if this policy is not set, the global default value will be used either from the LegacySameSiteCookieBehaviorEnabled policy, if it is set, or the user's personal configuration otherwise.

Thanks @aporlebeke - Looks good!

I am confused on how to implement this fix. Is there a step by step or something I can download and import into Jamf?

Apologies in advance as I have yet to personally attempt to manage macOS Chrome settings.
Can someone describe in detail the .plist/xml file that needs to be created and where on the drive it needs to be located?
It seems like I missed the memo and a lot of these steps seem to be assumed. Thanks!