Description
The crowd token generation is based on multiple information from the client including User Agent header from the browser. For some reason IE8 occasionally decides to run in IE7 compatibility mode, and changes the User Agent header from MSIE 8.0 to MSIE 7.0.
Crowd interprets it as a new browser and the user is not logged in.
See https://studio.atlassian.com/browse/AGMP-586
The fix that we commited to 1.7-studio branch can be found here:
https://atlaseye.atlassian.com/changelog/crowd/?cs=107741
Attachments
Issue Links
- has a derivative of
-
CWD-2974 'User-Agent' not taken into account by Crowd when validating SSO token with the REST API
- Closed