Deeplinks do not work on SSO OP

Products

• Clarity PPM On Premise
• Clarity PPM SaaS

Issue/Introduction

OP setup with SAML and deeplinks does not work when not logged in, and will use RelayState niku/nu even if externalURL and errorURL is set up with RelayState

1. Set up SAML with Okta and Clarity 16.0.1
2. Ensure it works with no issue for SSO
3. Now set up a deep link for this environment in externalURL

http://SERVERNAME:PORT/niku/nu?RelayState=encode(replace(/niku/nu#action:,/niku/app?action=,${entryurl}))

6. Restart and try connecting again without being logged in. Note it will send you to niku/nu
7. Now set errorURL to http://SERVERNAME:PORT/niku/nu?RelayState=encode(replace(/niku/nu#action:,/niku/app?action=,${entryurl}))
8. Restart and try connecting again

Expected Results: the RelayState in externalURL should take precedence over any other setup.

Actual Results: Neither externalURL or errorURL RelayState is taken into account. Debug message:

INFO  2022-03-21 14:08:30,236 [http-nio-2444-exec-1] filter.SAMLFilter (clarity:OKTAUSER:5275398__623B3377-991D-4C82-925D-BB4C56B9ED59:none) SAMLFilter: Decoded relaystate 1 times: http:// SERVERNAME:PORT/niku/nu
INFO  2022-03-21 14:08:30,236 [http-nio-2444-exec-1] filter.SAMLFilter (clarity:OKTAUSER:5275398__623B3377-991D-4C82-925D-BB4C56B9ED59:none) Redirecting to http:// SERVERNAME:PORT/niku/nu

Environment

Release : 16.0.0, 16.0.1, 16.0.2, 16.0.3

Resolution

This is DE64489, reviewed by Engineering and will be addressed as a part of upcoming enhancement feature story work. 

Additional Information

This will work in 16.0.3 if you're not using Azure.  The 16.1.0 release will work with Azure.

This feature is available in 16.0.3.  However, we would need to run these clarity commands to enable it.
After the command is run, it is required to restart  the clarity services.

 

Run this clarity command:

admin toggle-feature SSO_BOOKMARKS 1

or this SQL update:

update cmn_features set enabled=1 where code = 'SSO_BOOKMARKS'