When connecting Arbortext Editor to a Windchill server that uses Single-Sign On (SSO) or forms-based authentication, it is now supported to have the HTTPOnly flag be set on session cookies.