Hi, we have an application where we login with an Ory browser login flow via a custom login UI. The user then has a valid session cookie. We then want the user to be able to access a salesforce site using the same Ory project for SSO. We have created an OAuth client that Salesforce is using.
This works, the salesforce app redirects the user to the ory account experience and they are able to login. But the user is still being prompted to enter their password again even when they have a valid session. All of the sites involved are on the same domain and I can see a session cookie for that domain
Shouldn't the account experience login UI see the session cookie and then skip the login?