Question

1
Replies
1803
Views
 Vishal Aswale (VishalAswale)
Infosys

Infosys
IN
VishalAswale Member since 2014 9 posts
Infosys
Posted: December 14, 2016
Last activity: December 15, 2016
Posted: 14 Dec 2016 5:17 EST
Last activity: 15 Dec 2016 10:03 EST
Closed

After user authentication timeout, is logged off. Login Screen appears but the URL is incorrect.

When the user session is timed out, we log out the user with logout activity on authentication service. We are redirected to the login screen but the browser url in not correct. 

When user trying to login again, a application page is opened with no header,footer, navigation panel.

The py challenge is set to DEFAULT_CHALLENGE. timeout stream is the Web-Login Html stream.

Please provide a solution.

Thanks in advance.

***Updated by moderator: Lochan to add Categories***

Security User Experience
Moderation Team has archived post, This thread is closed to future replies. Content and links will no longer be updated. If you have the same/similar Question, please write a new Question.
Posted: 4 years ago
Posted: 15 Dec 2016 10:03 EST
Paul Gentile (PaulGentile_GCS)
PEGA
Sr. Software Solutions Engineer
Pegasystems Inc.
US

Are you using SLO - check the setup in Pega for this. Are you passing the redirect URL to an IDP for them to use after they do their thing?


Try capturing a Fiddler trace and seeing what HTTP error code is occurring - especially after user tries to relogin. Observe the cookies in both the request and responses of the last HTTP-200 session and subsequent non HTTP-200 sessions in the trace.