What causes the "Session has expired for this request."

Products

• CA Risk Authentication

Issue/Introduction

Error message seen in the arcotafm.log,

INFO  integrations.frontend.LifeCycleStateData(741) [] ->  @@@@ ==>>> JSP Name with Qeury Params.. collectOTP.jsp?StateDataAttrNm=56c800a657ad387d |20250929065751.915.397c5ca4
...
INFO  integrations.frontend.LifeCycleStateData(741) [] -> Session has expired for this request. Displaying the timeout error message. |570b6000fbb44d55eefbe20425ca1c7b42c376e2

Resolution

AFM is session based, session expire could be due to,

1. OTP expired -- user didn't input the OTP in time.

2. User didn't input OTP, just click Back button, or refresh page.

3. The sticky session setting is not enabled on load balancer.