DocumentationExperience PlatformData Collection

[Alpha]{class="badge informative"}

thirdPartyCookiesEnabled (Server SDK)

Last update: October 29, 2026

CREATED FOR:

  • Developer

This page describes thirdPartyCookiesEnabled in the Server SDK configure method. For the Web SDK, see thirdPartyCookiesEnabled.

style
shade-box

The thirdPartyCookiesEnabled property determines whether the Server SDK uses the Adobe Audience Manager third-party domain, adobedc.demdex.net, to help identify visitors. It also controls whether you can request the visitor’s CORE ID.

How this property works on a server how-it-works

In a browser, the Web SDK uses the third-party domain to read and set a cookie on demdex.net, which helps identify a visitor across domains. On a server, requests go directly from your server to Adobe, so they never carry the visitor’s demdex.net cookie, and any demdex.net cookie that Adobe sets in the response never reaches the visitor’s browser.

When thirdPartyCookiesEnabled is true, which is the default:

  • A visitor’s first unauthenticated request, from getIdentity, appendIdentityToUrl, or setConsent, goes to adobedc.demdex.net instead of to the edgeDomain.
  • The SDK asks the Edge Network for both the ECID and the CORE ID.
  • You can request the CORE namespace with getIdentity. Because the request doesn’t carry the visitor’s demdex.net cookie, the CORE ID that the server receives might not match the one in the visitor’s browser.

When thirdPartyCookiesEnabled is false:

  • All unauthenticated requests go to the edgeDomain.
  • The SDK asks the Edge Network for the ECID only.
  • Requesting the CORE namespace with getIdentity rejects with an error.

This property doesn’t affect where sendEvent sends events. The SDK always sends events to the authenticated Edge Network Server API.

Unless you need the CORE ID, consider setting thirdPartyCookiesEnabled to false, so that all requests go to your configured edgeDomain.

Code example

Set the thirdPartyCookiesEnabled boolean when you call configure. If you omit it, it defaults to true.

await alloy.configure({
  datastreamId: "ebebf826-a01f-4458-8cec-ef61de241c93",
  orgId: "ADB3LETTERSANDNUMBERS@AdobeOrg",
  edgeCredentials: {
    clientId: process.env.ADOBE_CLIENT_ID,
    clientSecret: process.env.ADOBE_CLIENT_SECRET,
    scopes: process.env.ADOBE_SCOPES.split(",")
  },
  thirdPartyCookiesEnabled: false
});
recommendation-more-help
experience-platform-help-collection