Sign-In page crash after IDSP upgrade for users with active sessions

Products

• Symantec Identity Security Platform - IDSP (formerly VIP Authentication Hub)

Issue/Introduction

The IDSP upgrade from version 3.4.6 to 4.0.1 is performed during the middle of the day, and some users have already accessed IDSP prior to the upgrade. After the upgrade is completed, all pods are running successfully and no initialization errors are observed. However, users who have already accessed the solution earlier in the day are unable to load the sign-in page. In contrast, users who have not accessed the solution before the upgrade are able to load the sign-in page successfully.

In the logs, repeated occurrences of the "process expired flow state" message are observed:

Environment

Symantec Identity Security Platform 4.0.1

Cause

When the French locale (fr-FR) is used, the tenant locale data returned by the locale API does not include the passwordExpiry section in the French translation. As a result, the sign-in page may crash under these conditions.

Resolution

This issue is not related to flow states. The processExpiredFS log entries are normal background Hazelcast cache cleanup activities and can be considered a red herring in this context.

The fix for the translation-related issue has been implemented in both versions 4.0.2 and 4.1.0.