Essentials security page not redirecting back to application

Permanently deleted user

08 September 2016 03:16

Hi,

 

 

 

I’m getting th "The Sign In or Sign Out operation was successful, but no application was given" error when I try to run a secured HTML5 viewer (v2.7, GE v4.6) over HTTPS:

 

_img_ alt="Error message" src="https://latitudegeo--c.na53.content.force.com/servlet/rtaImage?eid=90660000000TSlA&feoid=Body&refid=0EM60000000M1NE"_/_img_

 

This error occurs in Chrome, Firefox and IE11.

 

 

 

This problem does not happen when I access the same page over HTTP.

 

 

 

My understanding of the viewer loading process is this: 

1. I have a URL to a viewer
2. I type this URL into a browser and it sends me to the viewer
3. At some point during the loading of the viewer, it realises that anonymous users are not allowed, and forwards me on to the identity server(?) to authenticate and authorise me (in our case, this is done against AD)
4. Provided I have the relevant permissions granted to me, the authentication and authorisation is successful and I’m forwarded on to the viewer (the identity server knows which viewer to forward me on to by referencing an –app url parameter or by looking at the referrer parameter in the request header) 

From looking at the network traffic during the loading of the viewer (using the Chrome developer tools), when the request is being made to the identity server from the viewer (i.e. step 3 above) over HTTPS, it does *not* contain a referrer parameter in the request header. Therefore the identity server cannot redirect me back to the viewer.

 

 

 

Has anyone else seen this behaviour and managed to fix it? It feels like a bug to me but I'm hoping there's a fix/workaround out there somewhere! 

 

Thanks,

 

Dave

 

 

0

• 

  Permanently deleted user

  08 September 2016 03:49

  David,

   

  just thinking out aloud really, without testing, but have you got the https://address... registered in the hosts as part of the Post installation?

   

  

  0
• 

  Permanently deleted user

  08 September 2016 08:07

  Thanks Gareth. Looks like the problem is actually with my reverse proxy. I thought I'd isolated my testing so I my requests weren't going through the proxy, but on further examination I hadn't. Still haven't got to the bottom of this yet, but header values being stripped out of requests going via the proxy sounds a lot more likely.

  0
• 

  Permanently deleted user

  28 November 2016 23:07

  Hi David, did you find a solution? We have a similar issue with the proxy.

  0
• 

  Permanently deleted user

  29 November 2016 03:47

  Hi,

   

  I think I may have just found a fix for this problem. My issues were happening when I was launching the viewer from a shortened URL (https://support.geocortex.com/essentialsGSCkba?sub-nav=kba&main-nav=essentials&#!/feedtype=SINGLE_ARTICLE_DETAIL&dc=All_Essentials_kba&criteria=BESTANSWERS&id=kA360000000Cina) . If I launch my viewer using the default shortened URL (i.e. https://acme.com/h5/index.html?viewer=siteName.viewerName) then these issue don't seem to occur for me.

   

  Hope that helps.

  0

Du måste logga in om du vill lämna en kommentar.