SAML-based SSO environment redirecting to error and signon URL instead of timeout URL during timeout

Products

• Clarity PPM On Premise

Issue/Introduction

When Clarity times out, it is expected that the SSO Timeout URL is displayed.

However, the Signon URL is displayed when the timeout occurs in the Modern UX, and the Authentication Error URL is displayed when the timeout occurs in the Classic UX.

Steps to Reproduce:

1. In a SAML-based SSO-enabled environment, check the CSA values under Security > SSO for:
   Authentication Error URL
   Timeout URL
   Signon URL
2. Set the timeout in Clarity (Administration > General Settings > System Options > Minutes Of Inactivity Until Logout) to a low value, like 2 minutes.
3. In Clarity Classic UX, note the time for the last click and wait for >2 minutes so that the session times out. Then, click on a link in Clarity.

Expected Results: Timeout URL is displayed.

Actual Results: Authentication Error URL is displayed.

4. In Clarity Classic UX, note the time for the last click and wait for >2 minutes so that the session times out. Then, click on a link in Clarity.

Expected Results: Timeout URL is displayed.

Actual Results: Signon URL is displayed.

Environment

Release : 16.1.0

Resolution

This has been fixed as part of the work for DE67277 and it is available in Clarity 16.1.1.