Question

4
Replies
1052
Views
 AlagarPandi Pandi (AlagarPandiP)
Scope International

Scope International
MY
AlagarPandiP Member since 2015 3 posts
Scope International
Posted: June 12, 2016
Last activity: April 5, 2017
Posted: 12 Jun 2016 9:45 EDT
Last activity: 5 Apr 2017 0:06 EDT
Closed
Solved

Pega LDAP Time out popup is not working with Chrome Browser- Pega SR Raised SR-A75937

Hi,

We are suing Pega LDAP functionalities. We are facing few issues as states below

Issue -1

When we use

Timeout options
Use PegaRULES Timeout
Use Basic Authentication for Timeout

Both check box selected. Time out pop up happened. But the below steps creating issue
1. Login
2. Time out- give user id and pwd login
3. Time out- In Pop up just click on cancel/Refresh browser/click back button in browser/back space in keyboard
4. allowing to access screens

the above issue is security violation.


Issue -2
When we use

Timeout options

Use PegaRULES Timeout
Use Basic Authentication for Timeout

1st check box selected , 2nd check box not selected. And <<Timeout challenge stream>> given as  <<Web-Login-LDAPAuth>> but this config works partially.

1. Login

2. Wait for Time out- Pop up coming if you click Dashbaord work item/Team member item. But not throwing auth poup for top panel op id profile/logoff/Case Create link etc. In Report tab, if you click report link it throw auth time out popup - if you give proper user id and pwd, it duplciate case manager/user portal.

We raised an SR#:  SR-A75937.. But we are not get any solution yet.



Thanks

Alagar








Security
Moderation Team has archived post, This thread is closed to future replies. Content and links will no longer be updated. If you have the same/similar Question, please write a new Question.
Posted: 5 years ago
Posted: 13 Jun 2016 9:29 EDT
Marissa Rogers (MarissaRogers)
MOD
Senior Community Moderator
Pegasystems Inc.
US

Hi AlagarPandi Pandi,

Upon reviewing your associated SR, I see that you were given a local change and in the resolution the Engineer stated "After this change, user was able to get a basic auth pop-up challenge which works fine. ". Is this local change no longer working for you?

Accepted Solution

Posted: 5 years ago
Posted: 13 Jun 2016 21:08 EDT
Harish Gunneri (Harish_GCS)
PEGA
Senior Software Solutions Engineer
Pegasystems Inc.
US

Hi,

We have used WebLDAP1 PRCustom authentication scheme and given custom HTMLStreams like Web-Login or Web-Login-LDAPAuth on timeout challenge, now we are able to overcome the Chrome security violation issue.

I've worked with Alagar, this has been taken care.

Thanks,

Harish
Posted: 4 years ago
Updated: 4 years ago
Posted: 5 Apr 2017 0:05 EDT
Updated: 5 Apr 2017 0:06 EDT
Michelle Vedad (MichelleTV)
SMS Management and Technology

SMS Management and Technology
PH

Hi Harish,


Experiencing the same issue on version 7.1.8. Below are the steps I have done for session timeout:


1. Update an accessgroup Authentication timeout to 1 min.


2. We are using WebLDAP1 for Authentication Service. On Timeout Options set Web-Login on Timeout challenge stream.



3. Wait for the session timeout and a login popup will show. When clicking on Cancel or x button, the user was still able to login which is a security issue.


Is there any setup I need to add?


 


Kind Regards,


Michelle