Portal properties - Security

Use Secure-Flag for session cookies (only possible with https:// in Basis-URL)

With this setting, Secure-Flags will be set when sending cookies to a user. This protects cookies from unauthorized monitoring during the transmission. Browsers, which support Secure-Flags, will only send cookies with Secure-Flags if an HTTPS page is requested; cookies will not be transmitted with Secure-Flags during unencrypted HTTP requests.

Allow sessions without cookies

Here, you can determine whether sessions should be allowed without cookies. You can choose from the following three options:

Never
Anonymous only
All (unsafe)