EducationSoftwareStrategy.com
StrategyCommunity

Knowledge Base

Product

Community

Knowledge Base

TopicsBrowse ArticlesDeveloper Zone

Product

Download SoftwareProduct DocumentationSecurity Hub

Education

Tutorial VideosSolution GalleryEducation courses

Community

GuidelinesGrandmastersEvents
x_social-icon_white.svglinkedin_social-icon_white.svg
Strategy logoCommunity

© Strategy Inc. All Rights Reserved.

LegalTerms of UsePrivacy Policy
  1. Home
  2. Topics

KB43511: Trusted authentication web users are logged out and requested to authenticate when opening the collapsible menu in MicroStrategy 9.3.0 and above.


Community Admin

• Strategy


SSO users may encounter an issue with their session in environments configured to access MicroStrategy Web through Trusted Authentication provider Oblix (Oracle Access Management). Affected users may get logged out from their current Oblix session when opening the MicroStrategy Web 9.3 collapsible menu by clicking the starburst icon on the top left.

Description
 
SSO users may encounter an issue with their session in environments configured to access Strategy Web through Trusted Authentication provider Oblix (Oracle Access Management). Affected users may get logged out from their current Oblix session when opening the Strategy Web 9.3 collapsible menu by clicking the starburst icon on the top left.
 

ka04W000000OgylQAC_0EM4400000026dD.png

 
This issue only occurs when opening the menu. Other actions such as navigating in folders or running reports and documents works correctly.
 
The Fiddler log reveals that the HTTP request to load one of the icons used to render the menu returns the following value for the required cookie "ObSSOCookie":


ObSSOCookie=loggedout;secure; httponly; path=/; domain=example.com

 

Cause
 
The root cause of this issue is a default behaviour of Oracle Access Management as documented in the link below (third-party resource):
 
http://docs.oracle.com/cd/E15217_01/doc.1014/e12488/v2logout.htm#CACIGIHA
 
"The WebGate logs a user out when it receives a URL containing "logout." (including the "."), with the exceptions of logout.gif and logout.jpg, for example, logout.html or logout.pl. When the WebGate receives a URL with this string, the value of the ObSSOCookie is set to "logout"." 
 
 
Action
 
This is third-party behavour on which Strategy has no influence. Please contact your third party provider for support on this issue.
 
  
Workaround
 
On Strategy side the only possible workaround is to create a Strategy customization plugin that modifies the name of sc_logout.png to a different file name, not affected by OAM behavior as described above.
 
Please refer to Strategy Developer Library for more information on how to create SDK plugins and to customize Strategy Web. 
 
 
 
WARNING:
The third-party product(s) discussed in this technical note is manufactured by vendors independent of Strategy. Strategy makes no warranty, express, implied or otherwise, regarding this product, including its performance or reliability.
 
This technical note contains a link to a third party website that is not under the control of Strategy. When the user accesses a third party web site, the user does so at his or her own risk and acknowledges that Strategy is not responsible or liable for any content, advertising, products or other materials available from such third party sites. Mention of third party companies and web sites in this technical note is for informational purposes only and does not constitute an endorsement or recommendation.
 
 


Comment

0 comments

Details

Knowledge Article

Published:

June 7, 2017

Last Updated:

June 7, 2017