Hello. How can I set the domain of session cookies?

I want to run keycloak at auth.mydomain.com and get the session cookies (for SSO) at other subdomains of mydomain.com.

Browsers will allow sub.domain.com to set cookies for domain.com, but I can't figure out how to get Keycloak to do this.