Facing issue with SSO in Chrome, However in IE it is working fine
While configuring SAML SSO, facing below error in Chrome.
Error 1: The Content Security Policy directive 'report-uri' specifies as endpoint 'endpoint URL. This endpoint will be ignored since it violates the policy for Mixed Content.
Error 2: Refused to send form data to 'SSO IDP URL' because it violates the following Content Security Policy directive: "form-action 'self'".
However, it is working fine in IE
JPMorgan Chase
IN
Hello
Do allow listing of your SSO URL in your application settings so that 2 way communication is open during authentication is in process
Check your content security policy at the application rule.
Infosys
DE
@SriHarsha Anika Thank you for your feedback.
The issue was solved by the middleware team who have added a config and rewritten the content-security-policy header to correctly adapt http headers to https.
JPMorgan Chase
IN
@Srikanth Kuttumu Could you please accept the solution and mark it as close