---
title: Cookie reset
description: Web Agents can reset cookies before redirecting the client to a login page, by issuing a Set-Cookie header to the client to reset the cookie values.
component: web-agents
version: 2023.11
page_id: web-agents:user-guide:cookie-reset
canonical_url: https://docs.pingidentity.com/web-agents/2026/user-guide/cookie-reset.html
llms_txt: https://docs.pingidentity.com/web-agents/llms.txt
docs_for_agents: https://developer.pingidentity.com/build-with-ai/docs-for-agents.md
superseded_by: https://docs.pingidentity.com/web-agents/2026/user-guide/cookie-reset.html
---

# Cookie reset

Web Agents can reset cookies before redirecting the client to a login page, by issuing a Set-Cookie header to the client to reset the cookie values.

Cookie reset is typically used when multiple parallel authentication mechanisms are in play with the web agent and another authentication system. The agent can reset the cookies set by the other mechanism before redirecting the client to a login page.

|   |                                                                                                                                                                                                                                                                                                                            |
| - | -------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------- |
|   | To set and reset secure or HTTP Only cookies, in addition to the cookie reset properties, set the relevant cookie option, as follows:- To reset secure cookies, enable the `com.sun.identity.agents.config.cookie.secure` property.

- To reset HTTP only cookies, enable the `com.sun.identity.cookie.httponly` property. |

If you have enabled attribute fetching by using cookies to retrieve user data, it is good practice to use cookie reset, which will reset the cookies when accessing an enforced URL without a valid session.