IBM Verify Identity Governance applets do not work

WebSEAL file and WebSphere® Application Server configuration causes function problems with the applets in Identity Manager.

Problem

A Identity Manager applet, such as the workflow designer, does not work. It does not provide support when you do the following changes:
  • Set as pass-http-only-cookie-attr=yes in the WebSEAL configuration file.
  • Set the HttpOnly attribute to JESSIONID in WebSphere Application Server.
  • Set the HttpOnly attribute to PD-S-SESSION-ID cookie in WebSphere Application Server.
An error can occur with these settings.

The cookie does not supply information to the applet with these settings. As a result, you cannot use the Identity Manager applet through WebSEAL.

Solution

The WebSEAL does not pass the HttpOnly attribute in the cookie. You can access the cookie information from the applet with the following setting in the WebSEAL configuration file:
pass-http-only-cookie-attr=no