SSO Issue's with Redirects

We are having some strange issues with our SSO lately. For some reason this week when users log in with SSO, they either do not get logged in and are redirected to the homepage; or they get redirected to a random page within the community. We have seem users land on forum threads, other user's profiles, even pages that do not exist anymore.

We are not seeing any errors being generated and we have confirmed the redirect URL is correctly set up until the user hits the /oauth page.

 ; have you or your team seen any oddities like this? Diane mentioned to us there were some issues when you upgraded to v12 previously.



Tagging
[edited by: Stephen Vicino at 8:14 PM (GMT 0) on Thu, Mar 9 2023]
Parents Reply
  • Then some attention may need to be made to the implementation details of the IOAuthClient plugin as it may be leaking state as well. 

    The recommendation for SSO is to (1) not use IOAuthClient (which is intended for alternate authentication, not primary) and (2) instead use one of the plugin types mentioned above.

    A fix to the issue that is known in Community (noted above, TE-15650) would require a new version of IOAuthClient which would require follow-on work for any implementations. It would be more direct to use the recommended plugin type if it is applicable (primary SSO authentication).

Children
No Data