In incognito mode it blocks third-party cookies if your authentication flow relies on cookies that are considered "third-party" that is - ( cookies set by domains other than your own during the authentication process), these cookies may be blocked. This can result in the session not being recognized after the redirect back from the third-party authentication provider.