How to customize account disabled error message when logging in with SSO?
When using a SAML2 authentication service, if a user attempts to access the system but their operator id is marked as disabled, they get an error message "Your account has been disabled, contact your administrator"
I need to be able to customize this message.
I cannot find an appropriate rule in the system that contains this message for our scenario so am assuming it is set in the API engine itself. However, I'm assuming it can be intercepted and amended!
I've set additional logging on the following but nothing shows up, so I'm probably looking at the wrong activities etc
com.pega.pegarules.integration.engine.internal.util.PRSAMLv2Utils com.pega.pegarules.integration.engine.internal.sso.saml.SAMLResponseHandler com.pega.pegarules.integration.engine.internal.sso.saml.SAMLRequestHandler com.pega.pegarules.integration.engine.internal.sso.AbstractSSOHandler com.pega.pegarules.integration.engine.internal.sso.saml.SAMLv2ACSHandler
Can anyone please help?
***Edited by Moderator: Pallavi to change content type from Discussion to Question***
Accepted Solution
Updated: 13 Jul 2020 8:49 EDT
Pegasystems Inc.
PL
Hello,
The message itself cannot be changed but the html stream that is displayed can and hence you can change the message there.
The way is to save the pySSOErrorRedirectRequest html stream to your unauthenticated requestor ruleset and then you can modify it to catch this particular message and change it without changing the other massages:
<html>
<pega:choose>
<pega:when java='<%= tools.getPrimaryPage().getProperty(".pyErrMsg").getMessages().equals("Your account has been disabled, contact your system administrator") %>' >
<body>Custom text: sample</body>
</pega:when>
<pega:otherwise>
<body><%=tools.getPrimaryPage().getProperty(".pyErrMsg").getMessages()%> </body>
</pega:otherwise>
</pega:choose>
</html>
Hope it helps
Updated: 22 May 2020 4:22 EDT
SiXworks
GB
I'll take a look at that. For whatever reason, that rule never came up in my searching but I'll certainly give it a go
Edit to say... We're in the middle of an upgrade from 8.1.3 to 8.4.1. The .js file linked to doesn't have the account disabled message in the earlier version (where I was searching) but obviously does have it in the new version. We'll be upgrading the environment that has SSO logins in about a week so I'll check it then and update this thread with my findings
Self
IN
Hi
As per my understanding , we can not modify these messages as these are hard coded in the engine class :
com/pega/pegarules/session/internal/mgmt/authentication/Authentication , to change the values it requires a Code-Change which we can not do .
There is also a Feedback item raised for the same disable operator message , FDBK-69138 for version 8.1.x .
Regards
Accepted Solution
Updated: 13 Jul 2020 8:49 EDT
Pegasystems Inc.
PL
Hello,
The message itself cannot be changed but the html stream that is displayed can and hence you can change the message there.
The way is to save the pySSOErrorRedirectRequest html stream to your unauthenticated requestor ruleset and then you can modify it to catch this particular message and change it without changing the other massages:
<html>
<pega:choose>
<pega:when java='<%= tools.getPrimaryPage().getProperty(".pyErrMsg").getMessages().equals("Your account has been disabled, contact your system administrator") %>' >
<body>Custom text: sample</body>
</pega:when>
<pega:otherwise>
<body><%=tools.getPrimaryPage().getProperty(".pyErrMsg").getMessages()%> </body>
</pega:otherwise>
</pega:choose>
</html>
Hope it helps