Skip to main content

This content is closed to future replies and is no longer being maintained or updated.
Links may no longer function. If you have a similar request, please write a new post.

Question

 AlagarPandi Pandi (AlagarPandiP)
Scope International

Scope International
MY
AlagarPandiP Member since 2015 3 posts
Scope International
Posted: Jun 12, 2016
Last activity: Apr 5, 2017
Posted: 12 Jun 2016 9:45 EDT
Last activity: 5 Apr 2017 0:06 EDT
Closed
Solved

Pega LDAP Time out popup is not working with Chrome Browser- Pega SR Raised SR-A75937

Hi,

We are suing Pega LDAP functionalities. We are facing few issues as states below

Issue -1

When we use

Show More

Hi,

We are suing Pega LDAP functionalities. We are facing few issues as states below

Issue -1

When we use

Timeout options
Use PegaRULES Timeout
Use Basic Authentication for Timeout

Both check box selected. Time out pop up happened. But the below steps creating issue
1. Login
2. Time out- give user id and pwd login
3. Time out- In Pop up just click on cancel/Refresh browser/click back button in browser/back space in keyboard
4. allowing to access screens

the above issue is security violation.


Issue -2
When we use

Timeout options
Use PegaRULES Timeout
Use Basic Authentication for Timeout

1st check box selected , 2nd check box not selected. And <<Timeout challenge stream>> given as  <<Web-Login-LDAPAuth>> but this config works partially.

1. Login

2. Wait for Time out- Pop up coming if you click Dashbaord work item/Team member item. But not throwing auth poup for top panel op id profile/logoff/Case Create link etc. In Report tab, if you click report link it throw auth time out popup - if you give proper user id and pwd, it duplciate case manager/user portal.

We raised an SR#:  SR-A75937.. But we are not get any solution yet.



Thanks

Alagar









Show Less
To see attachments, please log in.
Security

Accepted Solution

Posted: 8 years ago
Posted: 13 Jun 2016 21:08 EDT
Harish Gunneri (Harish_Gunneri)
PEGA
Senior Principal Engineer, Technical Support
Pegasystems Inc.
US

Hi,

We have used WebLDAP1 PRCustom authentication scheme and given custom HTMLStreams like Web-Login or Web-Login-LDAPAuth on timeout challenge, now we are able to overcome the Chrome security violation issue.

I've worked with Alagar, this has been taken care.

Thanks,

Harish

To see attachments, please log in.
Posted: 8 years ago
Posted: 13 Jun 2016 9:29 EDT
Marissa Rogers (MarissaRogers)
MOD
Principal Knowledge Management Specialist
Pegasystems Inc.
US

Hi AlagarPandi Pandi,

Upon reviewing your associated SR, I see that you were given a local change and in the resolution the Engineer stated "After this change, user was able to get a basic auth pop-up challenge which works fine. ". Is this local change no longer working for you?

To see attachments, please log in.

Accepted Solution

Posted: 8 years ago
Posted: 13 Jun 2016 21:08 EDT
Harish Gunneri (Harish_Gunneri)
PEGA
Senior Principal Engineer, Technical Support
Pegasystems Inc.
US

Hi,

We have used WebLDAP1 PRCustom authentication scheme and given custom HTMLStreams like Web-Login or Web-Login-LDAPAuth on timeout challenge, now we are able to overcome the Chrome security violation issue.

I've worked with Alagar, this has been taken care.

Thanks,

Harish

To see attachments, please log in.
Posted: 7 years ago
Updated: 7 years ago
Posted: 5 Apr 2017 0:05 EDT
Updated: 5 Apr 2017 0:06 EDT
Michelle Vedad (MichelleTV)
SMS Management and Technology

SMS Management and Technology
PH

Hi Harish,

Experiencing the same issue on version 7.1.8. Below are the steps I have done for session timeout:

1. Update an accessgroup Authentication timeout to 1 min.

2. We are using WebLDAP1 for Authentication Service. On Timeout Options set Web-Login on Timeout challenge stream.

3. Wait for the session timeout and a login popup will show. When clicking on Cancel or x button, the user was still able to login which is a security issue.

Is there any setup I need to add?

 

Kind Regards,

Michelle

To see attachments, please log in.

We'd prefer it if you saw us at our best.

Pega Collaboration Center has detected you are using a browser which may prevent you from experiencing the site as intended. To improve your experience, please update your browser.

Close Deprecation Notice