IBM Support

PH00595: SSO NON ADMIN USER GETS BLANK PAGE AT HOME.DO WHEN SAM IS ENABLED

Subscribe to this APAR

By subscribing, you receive periodic emails alerting you to the status of the APAR, along with a link to the fix after it becomes available. You can track this item individually or track all items by product.

Notify me when this APAR changes.

Notify me when an APAR for this component changes.

 

APAR status

  • Closed as program error.

Error description

  • When System Admin Mode is enabled and a non-admin user logs in
    via SSO, the user is redirected to
    https://<servername>/openpages/home.do",  and is presented with
    a blank page.
    
    There are no warning or error messages informing the user that
    the OpenPages application is in System Admin Mode.
    The user is confused and believes the system is down.
    
    
    Workaround:
    none
    
    
    Prerequisites:
    OpenPages 7.3.0.2
    
    1)	Create a non-admin user account in OpenPages
    a.	Using a supported IE browser,  access the OP URL
    (http://serverhost:10108/openpages)
    b.	On top menu, navigate to Administration > Users Groups and
    Domains
    c.	Select any entity and click Add New under Users table
    d.	Fill in all required user information and select OpenPages
    Modules 7.3.0 Master for the Profile, and click Create button
    e.	Under Role Assignments, click Assign button
    f.	Click Add button and select the new user name you just
    created
    g.	Click the Next button and select OpenPages FCM 7.3  All
    Data No Admin for the Role and click Next
    h.	Select the Business Entity and then click Finish
    
    
    
    Steps to Reproduce:
    1.	Follow the steps in this internal TechNote to mimic an SSO
    user access,  TN#1624596,  using the new user created in PreReq.
    
    2.	In the New Browser session,  goto
    http://servername:10108/openpages/home.do?SMUSER=<new
    user>&SMSERVERSESSIONID=65432
    3.	Confirm that the home page displays for the new user as below
    and then logout
    
    
    
    4.	In the other IE session where OpenPagesAdministrator is
    logged in,  enable SAM
    5.	Open a new IE Browser and access
    http://servername:10108/openpages/home.do?SMUSER=<new
    user>&SMSERVERSESSIONID=65432
    
    6.	Confirm that the blank page is displayed as below:
    
    
    
    
    Expected Results:
    Non-admin SSO user should be issued a warning message that SAM
    is enabled when accessing home.do,  similar to the message
    displayed on a users log in page when SSO is disabled.
    
    
    
    
    
    Actual Results:
    Blank page is displayed when non-admin SSO user accesses home.do
    when SAM is enabled and user becomes confused.
    
    
    
    
    Error Message:
    
    None presented in APP UI.
    

Local fix

Problem summary

  • ****************************************************************
    * USERS AFFECTED:                                              *
    * OpenPages Users                                              *
    ****************************************************************
    * PROBLEM DESCRIPTION:                                         *
    *  SSO NON ADMIN USER GETS BLANK PAGE AT HOME.DO WHEN SAM      *
    * ISENABLED                                                    *
    ****************************************************************
    * RECOMMENDATION:                                              *
    * Customers should download OpenPages 8.2 from Passport        *
    * Advantage. See the following document for details on         *
    * obtaining OpenPages 8.2:                                     *
    * https://www.ibm.com/support/pages/downloading-ibm-openpages- *
    * watson-version-82-passport-advantage                         *
    ****************************************************************
    

Problem conclusion

  • This is now fixed so that if SAM mode is enabled and a non-admin
    tries to access the server, they will receive this warning:  You
    are not authorized to access this application. Please contact
    your Administrator.
    System Administration Mode must be disabled to perform this
    operation. Contact your system administrator.
    
    Customers should download OpenPages 8.2 from Passport Advantage.
    See the following document for details on obtaining OpenPages
    8.2:
    https://www.ibm.com/support/pages/downloading-ibm-openpages-wats
    on-version-82-passport-advantage
    

Temporary fix

Comments

APAR Information

  • APAR number

    PH00595

  • Reported component name

    OPENPAGES GRC

  • Reported component ID

    5725D5100

  • Reported release

    730

  • Status

    CLOSED PER

  • PE

    NoPE

  • HIPER

    NoHIPER

  • Special Attention

    NoSpecatt / Xsystem

  • Submitted date

    2018-07-17

  • Closed date

    2020-06-10

  • Last modified date

    2020-06-10

  • APAR is sysrouted FROM one or more of the following:

  • APAR is sysrouted TO one or more of the following:

Fix information

  • Fixed component name

    OPENPAGES GRC

  • Fixed component ID

    5725D5100

Applicable component levels

[{"Business Unit":{"code":"BU059","label":"IBM Software w\/o TPS"},"Product":{"code":"SSFUEU","label":"IBM OpenPages with Watson"},"Platform":[{"code":"PF025","label":"Platform Independent"}],"Version":"730","Line of Business":{"code":"LOB10","label":"Data and AI"}}]

Document Information

Modified date:
11 June 2020