SMSESSION cookie gets lost during during login process and user gets challenged again.
Why is SMSESSION cookie not submitted for certain sites during login process? (Which is causing a redirect loop for login)
Use case:
Protected site1: https://www.example.lab/protected/
Protected site2: https://application.example.lab/protected/
Login site: https://login.example.lab/siteminderagent/forms/login.fcc
User access site1 and get redirected to login page.
User submit credentials and gets access to site1 successfully.
User then access site2 and gets redirected to login page.
From header trace, SMSESSION cookie was successfully set and submitted to site1 and login site.
SMSESSION gets lost when accessing site2.