Problem statement
What is the expected behaviour when all cookies are disabled when the user visits the login page?
Solution
The user will be redirected to the application login URI (if set) or otherwise the tenant login URI.
This can cause a redirect loop if you send the user immediately back to the login page. Ideally you should have a landing page that checks for the availability of cookies, and if disabled, warns the user that they will need to enable them to continue.