I’m following https://www.ferroquesystems.com/resource/howto-okta-saml-at-citrix-gateway-with-sso-without-fas/ but trying to set up session policies with AAA groups to send people to different storefronts based on group membership. The issue I have is that it’s using a cookie to do the LDAP SSO, and if I use the same gateway for everything, the cookie from whatever account first logged in gets passed through. I’ve tried setting it as a session cookie but workspace never seems to delete it. Is there a way to add a variable or something to the cookie name so that it creates one for each AAA group, or do I need multiple gateways?