In the case illustrated by that HAR the issue seems to be that when ADFS responds to /login/callback there’s no Auth0 cookie available so the error is triggered. However, why that cookie is unavailable cannot be explained from the HAR because the expectation would be that before going to ADFS there was a request to the tenant that would setup the cookie and redirect to ADFS, but the HAR does not include it.