"You have been automatically logged out for security reasons" occurs after changing URL prefixes in IBM Business Process Manager (BPM) configuration files

During product installation, local configuration files for the IBM Business Process Manager product are generated. The existing configuration, which includes information necessary for generating URLs, gets compiled into the files 100Custom.xml and 99Local.xml.

At a later point in time, when a web server is introduced, the URL necessary for connecting to that server can be different than the URLs initially created from the local configuration files.

Because the information stored in the local configuration files is used to generate URLs for websites from Process Server, these local XML files need to be manually adjusted before the runtime URLs are generated. Be aware that symptoms of wrong configuration in the URLs generated from the local files can sometimes appear to be browser-related issues, because some browsers have caching mechanisms that render them more tolerant of URL discrepancies than others.

In general, this rule applies: URL values in 100Custom.xml and 99Local.xml must be written in exactly the same way as the ones that are used on the target systems at runtime. Be aware that there are several forms that can be used for typing web URLs, such as short forms (without DNS suffix ), and forms for adding ports, and so on. Do not mix these forms, even if they seem to be technically identical. The forms used for providing URL values must be consistent.

The respective files are located at :

<BPM_HOME> \profiles\<PROFILE>\config\cells\<CELL>l\nodes\<NODE> \servers\server1\process-server\config\system\99Local.xml

and

<BPM_HOME> \profiles\<PROFILE>\config\cells\<CELL>l\nodes\<NODE> \servers\server1\process-server\config\100Custom.xml

IBM BPM 7.5.x and IBM BPM 8.0 in a clustered environment that uses a proxy or web server in front of the Business Process Manager server.

A "TeamWorksConfiguration.running.xml" file is generated from several local configuration XML files at server startup. Check contents of this file to be sure that it contains the correct URLs that you were expecting.

You will find it at the following location:

<BPM_ROOT>\profiles\<profile_name>\config\cells\<cellName>\nodes\<nodeName>e\servers\<serverName>\process-center\TeamWorksConfiguration.running.xml

The config files that define the contents for this are placed at the following locations:

<BPM_ROOT>\profiles\<profile_name>\config\cells\<cellName>\nodes\<nodeName>e\servers\<serverName>\process-center\

and/or

<BPM_ROOT>\profiles\<profile_name>\config\cells\<cellName>\nodes\bpmapcNode\servers\<serverName>\performance-data-warehouse

Check any URLs that are displayed, to be sure they are the ones you expect.

Make changes within the 99local.xml and/or 100custom.xml files as needed and restart the server(s).

Make sure that there are no control characters (such as "CRLF") between the XML Tags <tag_samplet>...............</tag_samplet>, because these can cause unpredictable results.

Make sure that you make identical changes for these files on all affected nodes; the 100Custom.xml and 99Local.xml files are local to the systems on which they reside and they are not replicated automatically between nodes.