Then use an http header like we do with CORS or something, which lets a domain set a cookie for another domain that opts in. Or, you can just include the necessary cookie info in the redirect.