IP has Wrong Redirect after OpenID SSO auth
Article ID: 265993
Updated On:
Products
Issue/Introduction
IP URI is not being observed after SSO (OpenID) callback
The post-login redirect always takes you to home page
Example 1:
Open URL for IM Reports: https://{hostname}/sigma/app/index#/imreports
SSO Redirect: https://{hostname}/new/rlm/oauth/oauth20/authorize?response_type=code&redirect_uri=https%3A%2F%2F{hostname}%3A443%2Fsigma%2Fapp%2Fcallback&state=byqIuW0nvwNZ_L6P######################XfHnzniFRA&client_id=OthzH27xlYso5o4nCRqm&scope=openid+profile#/imreports
Observed Result: https://{hostname}/sigma/app/index#/home
Expected result: https://{hostname}/sigma/app/index#/imreports
Example 2: IG Certification
Open URL for Access Reviews: https://{hostname}/sigma/app/index#/campaigns
SSO Redirect: https://{hostname}/new/rlm/oauth/oauth20/authorize?response_type=code&redirect_uri=https://{hostname}:443/sigma/app/callback&state=Z1iF##########################_syTaXvSa3HnQs&client_id=OthzH27xlYso5o4nCRqm&scope=openid+profile
Observed Result: https://{hostname}/sigma/app/index#/home
Expected result: https://{hostname}/sigma/app/index#/campaigns
In IG UI, the SSO redirects correctly based on the callback state
In IM UI, the SSO redirects correctly based on the callback state
Only in IP does it not work correctly.
Environment
Release : 14.4
Resolution
You are seeing the expected behavior. From the documentation on OpenID SSO Authentication:
Access Identity Portal Web Interface
In a web browser, type in the Identity Portal User Console URL. You will be redirected to the OpenID Connect Provider's login page. After the successful OpenID Connect authentication, user is redirected to the Home (default module) page of the Identity Portal User Console.
This is the expected behavior for the Portal as of now.
The IP uses the Angular for the GUI. The Angular is the single page application. It uses the fragments in URL. The browser decides which part of the page needs to be displayed using this fragments. Unfortunately the fragments part will not send to the server. That's why when we use the SAML/OIDC, it always redirects to the home page. At this moment, it's technology limitation.
To change this behavior we will need to redesign the Portal, this may or may not be something we can accomplish, but the first step will be to open an Enhancement request. To submit an Enhancement IDEA; please submit a new 'Idea' to the Broadcom product communities in the Ideation area:
https://community.broadcom.com/ideation/allideas
Additional Information
There was desire to have both the original and the new functionality together to allow their existing design to work immediately after an upgrade. This fix should be worked into 14.4 Cp3, otherwise please open a support case and reference this KB.
Engineering has provided a hotfix for this issue - HF_14.4.2_10072023_DE562100_0003.zip
With the hotfix both URL patterns work correctly
The original URL pattern:
/sigma/app/index#/home
sigma/app/index#/campaigns
drops users onto their HOME page in Portal
To direct users to a specific Module, use the URL pattern: ?next=
/sigma/app/index?next=/sigma/app/index/home
/sigma/app/index?next=/sigma/app/index/campaigns
Feedback
