• State Suggested Answer
  • +1 person also asked this people also asked this
  • Replies 9 replies
  • Answers 1 answer
  • Subscribers 23 subscribers
  • Views 736 views
  • Users 0 members are here
Options
Related

SSO Issue's with Redirects

Stephen Vicino

We are having some strange issues with our SSO lately. For some reason this week when users log in with SSO, they either do not get logged in and are redirected to the homepage; or they get redirected to a random page within the community. We have seem users land on forum threads, other user's profiles, even pages that do not exist anymore.

We are not seeing any errors being generated and we have confirmed the redirect URL is correctly set up until the user hits the /oauth page.

 ; have you or your team seen any oddities like this? Diane mentioned to us there were some issues when you upgraded to v12 previously.



Tagging
[edited by: Stephen Vicino at 8:14 PM (GMT 0) on Thu, Mar 9 2023]
Parents Reply Children
  • 0 in reply to Ben Tiedt

    If my co-workers and I try login in at the same time we get redirected to the same random URL. However our issue is also occurring whenever a user logs in with some space between the last login.

  • 0 in reply to Stephen Vicino

    Then some attention may need to be made to the implementation details of the IOAuthClient plugin as it may be leaking state as well. 

    The recommendation for SSO is to (1) not use IOAuthClient (which is intended for alternate authentication, not primary) and (2) instead use one of the plugin types mentioned above.

    A fix to the issue that is known in Community (noted above, TE-15650) would require a new version of IOAuthClient which would require follow-on work for any implementations. It would be more direct to use the recommended plugin type if it is applicable (primary SSO authentication).

About
Privacy Policy
Terms of use
Copyright 2024 Verint, Inc.
Powered by Verint Community