[keycloak-user] set session cookie domain?

Hello. How can I set the domain of session cookies? I want to run keycloak at auth.mydomain.com and get the session cookies (for SSO) at other subdomains of mydomain.com. Browsers will allow sub.domain.com to set cookies for domain.com, but I can't figure out how to get Keycloak to do this. Thanks in advance!