IBM Support

PI95389: DISABLE POP UP ALERT FOR SSO LOGIN WHEN CQWEB TIMEOUT REACHES

Subscribe

You can track all active APARs for this component.

 

APAR status

  • Closed as program error.

Error description

  • Description:
    
    We have set up CQ-SSO integration using OKTA and our environment
    has 4 servers behind a load balancer. One issue that we have
    seen after this setup is that when CQWEB timeout reaches, we see
    a pop up window for SSO to re-authenticate the user.
    
    
    If we allow the pop up and add it as an exception in the
    browser, this error gets resolved without any more pop ups when
    the idle time case is met again.
    
    
    Business impact:
    
    The problem here is that we have 5000+ users accessing CQ in our
    organization and it is not feasible to make everyone aware to
    enable/allow the pop up on every browser they use.
    

Local fix

  • Workaround:
    
    Currently, the only option/workaround is to allow the pop up and
    add it as an exception in the browser (as described, above).
    

Problem summary

  • ****************************************************************
    * USERS AFFECTED:                                              *
    * CQ Web                                                       *
    ****************************************************************
    * PROBLEM DESCRIPTION:                                         *
    * If your browser has pop-ups disabled, and your SSO token and *
    * CQ session times out, CQ Web users see a nondescript "an     *
    * error occurred" message and do not know how to recover.      *
    ****************************************************************
    * RECOMMENDATION:                                              *
    ****************************************************************
    

Problem conclusion

  • A fix is available in ClearQuest 9.0.1.4
    When your SSO token and CQ session has timed out, CQ Web users
    are now prompted with a dialog asking for SSO Re-authentication
    where you can click either "OK" or "Close".
    * Clicking "OK" means CQ uses your SSO credentials and you will
    be authenticated again.
    * Clicking "Close" will close the popup.
    

Temporary fix

Comments

APAR Information

  • APAR number

    PI95389

  • Reported component name

    CLEARQUEST WIN

  • Reported component ID

    5724G3600

  • Reported release

    901

  • Status

    CLOSED PER

  • PE

    NoPE

  • HIPER

    NoHIPER

  • Special Attention

    NoSpecatt / Xsystem

  • Submitted date

    2018-03-19

  • Closed date

    2018-08-14

  • Last modified date

    2018-08-14

  • APAR is sysrouted FROM one or more of the following:

  • APAR is sysrouted TO one or more of the following:

Fix information

  • Fixed component name

    CLEARQUEST WIN

  • Fixed component ID

    5724G3600

Applicable component levels

  • R901 PSY

       UP

[{"Business Unit":{"code":"BU053","label":"Cloud \u0026 Data Platform"},"Product":{"code":"SSSH5A","label":"Rational ClearQuest"},"Platform":[{"code":"PF025","label":"Platform Independent"}],"Version":"901","Line of Business":{"code":"LOB36","label":"IBM Automation"}}]

Document Information

Modified date:
18 October 2021