Customer has set ignoreurl parameter in ACO but it didn't works as expected.
The expectation is ignoreURL will match the whole URI starting from "/connection/weblink?pageab=AA_CHANGEPWD".
It means if customer access https://support.ca.com/connection/weblink.htm , it should get challenge and ignoreURL shouldn't match.
However, the IgnoreUrl paramater resulted in anything /connection/weblink* being ignored.
IgnoreURL is working as design.
for example, "https://support.ca.com/connection/weblink?pageab=AA_CHANGEPWD" is a [scheme][hostname.domainname][resource/relative_uri][querystring].
The IgnoreUrl should applies to the resource/relative_uri and does not include the query string (in this case will be "?pageab=AA_CHANGEPWD") , which means only the /connection/weblink will be evaluated.