To support multiple cookie domains, Access Manager has the following new property:
com.sun.identity.authentication.setCookieToAllDomains
The default is true. This new property is hidden. To set the value to false, explicitly add the property to the AMConfig.properties file, and restart the Access Manager web container.