-
Type:
Improvement
-
Status: Ready for Developer (View Workflow)
-
Priority:
Major
-
Resolution: Unresolved
-
Affects Version/s: CFA 2021R4
-
Fix Version/s: None
-
Component/s: Login
In order to support the SSO for MxC in Production we have had to switch off the MMS SSO.
- If we leave it switched on, the iFrames, MxC pages within MMS don't work properly
- To try and reduce user acceptance and friction, we have implemented a manual 'hack' to teh MMS_Logon.aspx page
- We have inserted the following after the <head> tag
- Example from Staging:
- <meta http-equiv="refresh" content="0; URL=https://m.informstaging.cfahome.com/" />
The result of this snippet is that when a user tries to access MMS, either directly, or from a bookmarked url, when the page is loaded, the user is redirected to MxC. From here, the MxC SSO takes over and the user sees the correct Okta page and can login to MxC.
Notes
- We tried some other options, like reconfiguring the MMS SSO to point to MxC, but this caused a loop when trying to access MMS from MxC
Acceptance Criteria
- There is a new configuration option (this can be in the database, tbAppSettings, it doesn't necessarily need a UI component
- When configured, and MxC SSO is active, but MMS SSO is off:
- A user can login to MxC via SSO
- A user can navigate from MxC to MMS, using the Legacy link under Utilities
- If a user has an MMS url bookmarked, for example: ( https://informstaging.cfahome.com/MMS_Logon.aspx?ReturnUrl=%2fMMS_Stores_ExternalSite.aspx%3furl%3d%2fForecasting%2fView%3fmetric%3dtransactions%26MenuCustomItemID%3d407&url=/Forecasting/View?metric=transactions&MenuCustomItemID=407)
- When the user clicks on the bookmark, they bypass the MMS Logon page and go to MxC, which in turn will send them to the Okta login for that application
- If a user goes directly to MMS (https://inform.jatesting.cfahome.com/), they bypass the MMS Logon page and go to MxC, which in turn will send them to the Okta login for that application
- This needs to be put into code so that we don't forget to make the change post deploy, and end up losing the redirect!
- Note: The goal is to get users to update bookmarks for MMS and go directly to MxC, but we want to provide a smooth path to automatically do this