Question

4
Replies
1014
Views
AlagarPandiP Member since 2015 3 posts
Scope International
Posted: 4 years ago
Last activity: 3 years 5 months ago
Closed
Solved

Pega LDAP Time out popup is not working with Chrome Browser- Pega SR Raised SR-A75937

Hi,

We are suing Pega LDAP functionalities. We are facing few issues as states below

Issue -1

When we use

Timeout options
Use PegaRULES Timeout
Use Basic Authentication for Timeout

Both check box selected. Time out pop up happened. But the below steps creating issue
1. Login
2. Time out- give user id and pwd login
3. Time out- In Pop up just click on cancel/Refresh browser/click back button in browser/back space in keyboard
4. allowing to access screens

the above issue is security violation.


Issue -2
When we use

Timeout options

Use PegaRULES Timeout
Use Basic Authentication for Timeout

1st check box selected , 2nd check box not selected. And <<Timeout challenge stream>> given as  <<Web-Login-LDAPAuth>> but this config works partially.

1. Login

2. Wait for Time out- Pop up coming if you click Dashbaord work item/Team member item. But not throwing auth poup for top panel op id profile/logoff/Case Create link etc. In Report tab, if you click report link it throw auth time out popup - if you give proper user id and pwd, it duplciate case manager/user portal.

We raised an SR#:  SR-A75937.. But we are not get any solution yet.



Thanks

Alagar








Security
Close popover
Moderation Team has archived post
Posted: 4 years ago

Hi AlagarPandi Pandi,

Upon reviewing your associated SR, I see that you were given a local change and in the resolution the Engineer stated "After this change, user was able to get a basic auth pop-up challenge which works fine. ". Is this local change no longer working for you?

Accepted Solution
Posted: 4 years ago

Hi,

We have used WebLDAP1PRCustom authentication scheme and given custom HTMLStreams like Web-Login or Web-Login-LDAPAuth on timeout challenge, now we are able to overcome the Chrome security violation issue.

I've worked with Alagar, this has been taken care.

Thanks,

Harish

Posted: 3 years ago
Updated: 3 years ago

Hi Harish,


Experiencing the same issue on version 7.1.8. Below are the steps I have done for session timeout:


1. Update an accessgroup Authentication timeout to 1 min.


2. We are using WebLDAP1 for Authentication Service. On Timeout Options set Web-Login on Timeout challenge stream.



3. Wait for the session timeout and a login popup will show. When clicking on Cancel or x button, the user was still able to login which is a security issue.


Is there any setup I need to add?


 


Kind Regards,


Michelle
Share this page LinkedIn
Copied!