Question
Third party cookies must be enabled for mashup to function
Hi All,
I have add DIV mashup to open user portal, in IE able to open the portal, but in chrome i am getting "Third party cookies must be enabled for mashup to function" this error. Could you please suggest any configuration changes need to be done to make it work. We are using Pega 8.5.2 version
Accepted Solution
Refer - https://support.cloudhq.net/how-to-enable-3rd-party-cookies-in-google-chrome-browser/
For your browser Chrome is this enabled? Check if you disable then issue replicates?
Is this happening in Google Chrome's in incognito mode ( https://www.tripwire.com/state-of-security/security-data-protection/google-chrome-aims-to-keep-edge-over-browsers-with-latest-privacy-security-features/ )? If yes, then it is a Bug. For 8.5.2, the Bugs are already raised and it is fixed in 8.6.
In the Bug, Third party cookies reminder added for Mashup in incognito browsers When working in incognito/private browser windows, attempting to use Mashup displayed a message indicating login credentials were not recognized ("Unknown password and/or username"). This was due to recent changes originating with the browsers regarding blocking third-party cookies which are necessary for Mashup to run. For informational purposes in the platform, a new API has been added which will check for the PegaRules cookie; if the cookie is not present, the message "Third party cookies must be enabled for Mashup to function." will be displayed. This message may be customized by configuring the setting "pega.web.config.xCookiesDisabled" with the required message.
There is no HFix for the above. But before that please be sure that the issue is same. The Bug raised was specifically for incognito mode with "block 3rd party cookies" enabled.
Do you have the same setting for Chrome too?
Accepted Solution
Refer - https://support.cloudhq.net/how-to-enable-3rd-party-cookies-in-google-chrome-browser/
For your browser Chrome is this enabled? Check if you disable then issue replicates?
@RavindraGande is this issue resolved? even i am facing same issue when Salesforce using Pega Mashup code. Please guide me how to resolve.
My suggestion would be,
1. Create a html file of your own and keep it in the webapps folder in the Tomcat server
2. Add you mash up code into that html file
3. Run the html file in the chrome browser or any other browser.
It worked for me.
But when I tried to use W3schools site and HTML code then I got the cookies error.
Have you tried the steps provided above from @DebapriyaC3594
@TashikaS - How can we customize this message "Third party cookies must enabled for Mashup to function.".
As i see it is harcoded in a final rule.Attached PegaCompositeGadgetMgr.js in 8.5.3 version.
Could you please suggest what needs to be done to achieve this?
Please enable cookies in Dev Studio by following below steps it worked for me.
Click Configure > System > Settings > Cross-Site Request Forgery, enable the Enable samesite cookie attribute option and select None from the Samesite options list.
@Bipul Singh I have enabled third party cookies and did the CRSF settings as well. but the issue still persists, Do anyone able to work with Mash up?
@PankajS3454 check DSS value for
Pega-Engine • security/csrf/samesitecookieattributevalue and it should be None