Configuring the location URL format in redirect responses

When WebSEAL responds to a request with an HTTP 302 redirect response, the format of the URL in the Location header is, by default, expressed as an absolute path. For example:

Location: http://www.example.com/images/logo.jpg

If your environment requires the use of a server-relative format for the URL in the Location header, you can configure this specification in the WebSEAL configuration file.

Manually add the redirect-using-relative stanza entry to the [server] stanza and set the value to "true":

[server]
redirect-using-relative = true

With this configuration, the above Location header example will now appear as follows:

Location: /images/logo.jpg

This hidden configuration option normally defaults to "false".

This configuration change affects all redirect responses generated by WebSEAL. These redirect situations include:

• Redirect after authentication
• Redirect after logout
• Redirect after changing password
• Redirects during the e-community single signon authentication process
• Redirects during the cross-domain single signon authentication process
• Switch user processing
• Certificate authentication (prompt-as-needed only)
• Session displacement

This configuration change does not affect redirect responses that are returned from back-end application servers.