APAR status
Closed as documentation error.
Error description
When single sign-on (SSO) and SPNEGO Web authentication is enabled in a server environment, a browser without SSO configured cannot login to the Process Portal application. If a customer cannot configure all browser clients for SSO support, then configuration changes can be made that still make it possible to login to the Process Portal application. The purpose of this APAR is to add documentation to explain configuration changes that make it possible to login to Process Portal using a browser without SSO support in a server environment that has SSO support enabled.
Local fix
Problem summary
**************************************************************** * USERS AFFECTED: Users of BPM Express, BPM Standard, and * * BPM Advanced. * **************************************************************** * PROBLEM DESCRIPTION: Attempts to login to Process Portal * * are not successful if a browser * * without SSO support is trying to * * access a server environment with SSO * * support enabled. There can be * * multiple symptoms of trying to login * * with this configuration. When trying * * to login using Internet Explorer, * * there could be an attempt to display * * the portal/jsp/j_security_check page * * that results in an HTTP 404 message. * * When trying to login using Firefox, * * there could be an attempt to display * * the portal/jsp page that results in * * an HTTP 404 message. There could * * also be an attempt to display the * * portal/jsp/getSavedSearch.do page * * which results in a "SPNEGO * * authentication is not supported on * * this client" message. * **************************************************************** * RECOMMENDATION: * **************************************************************** This situation happens because the browser used to access Process Portal does not have SSO support configured.
Problem conclusion
Configuring SSO support for a browser client is a way to address this situation. However, if all browser clients that may be used to access Process Portal cannot have SSO support configured, then server-side configuration changes can be made. An "Accessing Process Portal using a browser that does not support single sign-on (SSO)" documentation section has been added to the Business Process Manager 7.5.1 Information Center that describes the server-side configuration alternative.
Temporary fix
Comments
APAR Information
APAR number
JR43154
Reported component name
BPM STANDARD
Reported component ID
5725C9500
Reported release
750
Status
CLOSED DOC
PE
NoPE
HIPER
NoHIPER
Special Attention
NoSpecatt
Submitted date
2012-06-20
Closed date
2012-11-06
Last modified date
2012-11-06
APAR is sysrouted FROM one or more of the following:
APAR is sysrouted TO one or more of the following:
Fix information
Applicable component levels
[{"Business Unit":{"code":"BU053","label":"Cloud & Data Platform"},"Product":{"code":"SSFTDH","label":"IBM Business Process Manager Standard"},"Component":"","ARM Category":[],"Platform":[{"code":"PF025","label":"Platform Independent"}],"Version":"7.5","Edition":"","Line of Business":{"code":"LOB45","label":"Automation"}}]
Document Information
Modified date:
06 November 2012