| Cookie Name | Description | Retention Period | Third Party |
| .ASPXANONYMOUS | Created by ASP.Net. This cookie configures anonymous identification for application authorization. This is required to identify entities that are not authenticated when authorization is required. | 2 months | No |
| .ASPXAUTH | Created by ASP.Net. .ASPXAUTH is a cookie to identify if the user is authenticated( As user's identity has been verified) | session | No |
| ARRAffinity | When using Microsoft Azure as a hosting platform and enabling load balancing, this cookie ensures that requests from one visitor's browsing session are always handled by the same server in the cluster. | Session | No |
| ARRAffinitySameSite | When using Microsoft Azure as a hosting platform and enabling load balancing, this cookie ensures that requests from one visitor's browsing session are always handled by the same server in the cluster. | Session | No |
| ASLBSA | Microsoft App Service and Front Door Affinity Cookies. These cookies are used to direct your browser to use the appropriate backend server. | Session | No |
| ASLBSACORS | Microsoft App Service and Front Door Affinity Cookies. These cookies are used to direct your browser to use the appropriate backend server. | Session | No |
| ASPSESSIO | Browsing session: the asterisks identify an alphanumerical code that varies from session to session in automatic mode. | Session | No |
| ApplicationGatewayAffinity | This cookie is used by Azure Apps to keep a user session on the same server. | Session | No |
| ApplicationGatewayAffinityCORS | This cookie is used by Azure Apps to keep a user session on the same server. | Session | No |
| CookieControl | Stores user consent preferences for your website. | 3 months | No |
| CookieControlTC | Stores IAB TCF consent preferences. | 3 months | Unknown |
| JSESSIONID | JSESSIONID is a cookie generated by Servlet containers and used for session management in J2EE web applications for HTTP protocol. If a Web server is using a cookie for session management, it creates and sends JSESSIONID cookie to the client and then the client sends it back to the server in subsequent HTTP requests. JSESSIONID is a platform session cookie and is used by sites with JavaServer Pages (JSP). The cookie is used to maintain an anonymous user session by the server. | Session | No |
| RpsContextCookie | This cookie is used by Microsoft to securely verify your Sharepoint login information | session | Yes |
| VisitorStorageGuid | This cookie is used by Azure Apps to keep a user session on the same server. | Session | No |
| __AntiXsrfToken | This cookie is used to prevent Cross-site request forgery (often abbreviated as CSRF) attacks of the website. CSRF attacks exploit the trust that a site has in a user's browser. | session | No |
| ai_session | This is a unique anonymous session identifier cookie. | 30 minutes | No |
| ai_user | This is a unique user identifier cookie enabling counting of the number of users accessing the application over time. | 1 years | No |
| buid | This cookie is used by Microsoft to securely verify your login information | 30 days | No |
| esctx | This cookie is used by Microsoft to securely verify your login information | Session | No |
| fpc | This cookie is used by Microsoft to securely verify your login information | 30 days | No |
| nSGt- | This cookie is used by Microsoft to securely verify your Sharepoint login information | Session | Yes |
| stsservicecookie | Cookie for Azure Active Directory B2C-verification | Session | No |