Troubleshooting: FBA Cookie Not Being Sent to Application

Version Affected: All
 
 

Overview

When integrating a new application that uses Forms-Based Authentication (FBA), the browser may not send the authentication cookie to the application even though all settings match between the IdP and the application. Instead of completing login, the application redirects the user back to the IdP login page.

 

Cause

Browsers only send cookies to app servers that are in the same domain as the cookie's domain.

 

Resolution

1. In the Admin Console, navigate to the realm and open its Post Authentication tab.
2. Click View and Configure FormsAuth keys/SSO Token.
3. Set the Domain field. This must match the domain shared by the IdP and the application server.

4. Click Save.

SecureAuth Knowledge Base Articles provide information based on specific use cases and may not apply to all appliances or configurations. Be advised that these instructions could cause harm to the environment if not followed correctly or if they do not apply to the current use case.

Customers are responsible for their own due diligence prior to utilizing this information and agree that SecureAuth is not liable for any issues caused by misconfiguration directly or indirectly related to SecureAuth products.