Request Failed error occurs in IP after session timeout

Products

• CA Identity Manager
• CA Identity Governance
• CA Identity Portal
• CA Identity Suite

Issue/Introduction

Identity Portal has been protected by Single Sign On.  Both the IP and SSO timeouts are set to the same value, e.g. 10 minutes.  If the user is inactive for more than the timeout value, and then tries to access a resource in IP, they see an orange and white pop-up "Request Failed" error rather than being redirected to the SSO login page.

 

Environment

Release : 14.x

Component : IdentityMinder(Identity Manager)

Cause

The LogOffUri parameter in SSO and the Logout redirect URL set in IP must have the same value.  In this case they were different, which caused the error.

Resolution

Ensure that the LogOffUri parameter that is set on the Agent Configuration Object in SSO is also configured in the CA Identity Portal Admin UI under Identity Portal Setup > General Configuration > SSO and that both settings have the same exact values.

 

For more information refer to the Configure Agent Configuration Object section in the documentation:

https://techdocs.broadcom.com/us/en/symantec-security-software/identity-security/identity-portal/14-5/integrating/single-sign-on-authentication-using-symantec-siteminder.html