Skip to content

When using Single Sign-on Frameworks, revocation is not always detected in callbacks #4418

@TheWitness

Description

@TheWitness

Describe the bug

When using SiteMinder, if the site minder ticket is revoked, and Cacti attempts to do a callback, the callback will fail and Cacti will not detect it.

Instead, the Cacti administrator should be able to add a detection string that can parse the callback response or redirect attempt and take the approximate action, like setting and error and displaying it.

To Reproduce

Steps to reproduce the behavior:

  1. Login to Cacti via your SSO

  2. Sit on a page long enough for the SSO token to be invalidated

  3. Try to goto another page

  4. Look at the Debug console for the error message

Expected behavior

Cacti should detect the message that was sent in the callback and set an error message and force a full page refresh in these cases.

Metadata

Metadata

Assignees

No one assigned

    Labels

    enhancementGeneral tag for an enhancementresolvedA fixed issue

    Type

    No type

    Projects

    No projects

    Milestone

    Relationships

    None yet

    Development

    No branches or pull requests

    Issue actions