KB486943: How to avoid MicroStrategy Web generating HTTP redirects in Tomcat behind a load balancer that terminates SSL

Introduction

Strategy Web might generate HTTP based links during trusted/SSO/OIDC authentication redirects such as the following:
http:///MicroStrategy/auth/oauth2/authorization/CORP_WEB_CLIENT
which obviously uses the wrong protocol, causing the authentication flow to break and return a blank page.

Steps

In order to change the behavior, a filter definition to use forwarded headers can be added into web.xml (in Strategy/WEB-INF):
 

<filter>

    <filter-name>forwardedHeaderFilter</filter-name>

    <filter-class>org.springframework.web.filter.ForwardedHeaderFilter</filter-class>

    <init-param>

      <param-name>relativeRedirects</param-name>

      <param-value>true</param-value>

    </init-param>

  </filter>

  <filter-mapping>

    <filter-name>forwardedHeaderFilter</filter-name>

    <url-pattern>/*</url-pattern>

  </filter-mapping>

This should be added directly before the first crlfResponseFilter block:
 

<filter>
 <filter-name>crlfResponseFilter</filter-name>

Then restart Tomcat for the changes to take effect.