Unable to launch pega from another web app
We provide a link to our cases from another web application and this link has now stopped working. We recently upgraded to 8.7.4 and its occured since then.
Here is the error from the browser
Request Method: GET
Status Code: 403 Forbidden
Remote Address: Proprietary information hidden:443
Referrer Policy: strict-origin-when-cross-origin
As part of the upgrade pyBlockUnregisteredRequests was set to true but i have tried setting this to false and it makes no difference.
Does anybody know how i can get around this?
Pegasystems Inc.
IN
Hi,
This looks like URL mapping issue. Please look at the below link and see 403 error troubleshooting for more details on how to solve it. See alert logs if you see the sec0019 alert as well. https://support.pega.com/support-doc/generating-url-access-case-sdr-81
Also please make note of product changes to BAC after the 8.5 introduced feature:
https://community.pega.com/knowledgebase/articles/security/85/identifying-custom-controls-configure
https://community.pega.com/knowledgebase/articles/security/85/verify-requests-application-layer
save the pyBlockUnregisteredRequests "When" rule and change it so it will return false (for example, pxProcess.pzProductionLevel > 6).
You will need to save this to an application or branch ruleset that is in the user's ruleset stack. Then try logging into a new session as an end user and check the behavior
You can save the when rule "pyBlockUnregisteredRequests" to your application ruleset and make sure it is always returning false.
In that case, an error will not be presented and the security feature described in the documentation will be disabled.