Yup, that's precisely it.

We documented the login breaks from Samesite and 3p cookies, but logout was both not particularly a concern for folks (I've gotten about three inquiries in two years), and pointless to document tombstoning patterns for Samesite since ITP would break those anyway.

https://docs.microsoft.com/en-us/azure/active-directory/deve...