PI95389: DISABLE POP UP ALERT FOR SSO LOGIN WHEN CQWEB TIMEOUT REACHES

Rational ClearQuest Fix Pack 4 (9.0.1.4) for 9.0.1
Rational ClearQuest Fix Pack 5 (9.0.1.5) for 9.0.1
Rational ClearQuest Fix Pack 6 (9.0.1.6) for 9.0.1
Rational ClearQuest Fix Pack 7 (9.0.1.7) for 9.0.1
Rational ClearQuest Fix Pack 8 (9.0.1.8) for 9.0.1
Rational ClearQuest Fix Pack 9 (9.0.1.9) for 9.0.1

APAR status

• Closed as program error.

Error description

• Description:
  
  We have set up CQ-SSO integration using OKTA and our environment
  has 4 servers behind a load balancer. One issue that we have
  seen after this setup is that when CQWEB timeout reaches, we see
  a pop up window for SSO to re-authenticate the user.
  
  
  If we allow the pop up and add it as an exception in the
  browser, this error gets resolved without any more pop ups when
  the idle time case is met again.
  
  
  Business impact:
  
  The problem here is that we have 5000+ users accessing CQ in our
  organization and it is not feasible to make everyone aware to
  enable/allow the pop up on every browser they use.
  

Local fix

• Workaround:
  
  Currently, the only option/workaround is to allow the pop up and
  add it as an exception in the browser (as described, above).
  

Problem summary

• ****************************************************************
  * USERS AFFECTED:                                              *
  * CQ Web                                                       *
  ****************************************************************
  * PROBLEM DESCRIPTION:                                         *
  * If your browser has pop-ups disabled, and your SSO token and *
  * CQ session times out, CQ Web users see a nondescript "an     *
  * error occurred" message and do not know how to recover.      *
  ****************************************************************
  * RECOMMENDATION:                                              *
  ****************************************************************
  

Problem conclusion

• A fix is available in ClearQuest 9.0.1.4
  When your SSO token and CQ session has timed out, CQ Web users
  are now prompted with a dialog asking for SSO Re-authentication
  where you can click either "OK" or "Close".
  * Clicking "OK" means CQ uses your SSO credentials and you will
  be authenticated again.
  * Clicking "Close" will close the popup.
  

Temporary fix

Comments

APAR Information

• APAR is sysrouted FROM one or more of the following:

• APAR is sysrouted TO one or more of the following:

Fix information

• Fixed component name

  CLEARQUEST WIN

• Fixed component ID

  5724G3600

Applicable component levels

• R901 PSY

     UP