Portal Links - IE Page Cannot Be Displayed Error
Symptom
Configured portal page with a link to an IdpInit realm. A PostAuthToken is generated when logging into the portal. The realm has the PreAuthToken set to be the same in order to achieve SSO from the portal. When using browsers Firefox, Chrome, Safari, and IE9, the desired workflow is successful; however any attempts with IE10 or IE11 will result in a "Page Cannot Be Displayed Error" unless compatibility mode is selected. Additionally the portal page icons may not display properly and a .NET error may appear stating the resource may have been moved.
Cause
Browser definition file not up to date on the server. As a result, IIS is under the impression that IE is non-cookie-accepting browser, thereby causing the information passed in the URL instead of generating a cookie.
Resolution
1. Apply the following hotfix (server level): http://support.microsoft.com/kb/2600088 to update the Browser Definitions.
2. Update the web.config for each realm (realm level). Select the web.config editor (located in the SysInfo tab of the WebAdmin) and search for "<authentication mode="Forms">" and make the following changes:
From:
<forms name=".ASPXFORMSAUTH" loginUrl="SecureAuth.aspx" protection="All" timeout="10" path="/" requireSSL="true" domain="" />
To:
<forms name=".ASPXFORMSAUTH" loginUrl="SecureAuth.aspx" protection="All" timeout="10" path="/" requireSSL="true" domain="" cookieless="UseCookies" />
Note
This setting can be added to the realm via the Web Admin console in SecureAuth IdP v7.4.0 and greater.