IJ33081: ERROR DESCRIPTION: THE CALL "IDP URL LOGOUT" IS NOT HAPPENING WHEN THERE IS A SESSION TIMEOUT.

APAR status

• Closed as program error.

Error description

• PROBLEM: When a session expires due to session timeout, the
  logout is not happen correctly
  
  {  "log": {
     "version": "1.2",
     "creator": {
       "name": "Firefox",
       "version": "87.0"},
     "browser": {
       "name": "Firefox",
       "version": "87.0"
     },
     "pages": [
       {
         "startedDateTime": "2021-04-14T13:04:16.637-04:00",
         "id": "page_2",
         "title": "https://max-sso-7611-1.fyre.ibm.com:9443/maxim
  o/oslc/logout?invalidatesso=1?uisessionid=11&timeout=1",
         "pageTimings": {
           "onContentLoad": 2384,
           "onLoad": 2387
         }
       }
     ],
     "entries": [
       {
         "pageref": "page_2",
         "startedDateTime": "2021-04-14T13:04:16.637-04:00",
         "request": {
           "bodySize": 0,
           "method": "GET",
           "url": "https://max-sso-7611-1.fyre.ibm.com:9443/maxim
  o/oslc/logout?invalidatesso=1?uisessionid=11&timeout=1",
           "httpVersion": "HTTP/1.1",
           "headers": [
             {
               "name": "Host",
               "value": "max-sso-7611-1.fyre.ibm.com:9443"
             },
             {
               "name": "User-Agent",
               "value": "Mozilla/5.0 (Macintosh; Intel Mac OS X
  10.15; rv:87.0) Gecko/20100101 Firefox/87.0"
             },
             {
               "name": "Accept",
               "value": "text/html,application/xhtml+xml,applicat
  ion/xml;q=0.9,image/webp,*/*;q=0.8"
             },
             {
               "name": "Accept-Language",
               "value": "en-CA,en-US;q=0.7,en;q=0.3"
             },
             {
               "name": "Accept-Encoding",
               "value": "gzip, deflate, br"
             },
             {
               "name": "Referer",
               "value": "https://max-sso-7611-1.fyre.ibm.com:9443
  /maximo/ui/?event=loadapp&value=wotrack&uisessionid=11&_tt=niq3
  cthkljlo71fra30209p2tk"
             },
             {
               "name": "DNT",
               "value": "1"
             },{
               "name": "Connection",
               "value": "keep-alive"},{
               "name": "Cookie",
               "value":
  "JSESSIONID=0000xAcNPJ9kIr8IP3Nuz_tDjRd:-1;
  LtpaToken2=HKCS9t9ZVnfVaQJrYxgJV7fKYZIAbxx7bFJwUk1W6+="},
             {
               "name": "Upgrade-Insecure-Requests",
               "value": "1"
             }
           ],
           "cookies": [
             {
               "name": "JSESSIONID",
               "value": "0000xAcNPJ9kIr8IP3Nuz_tDjRd:-1"
             },
             {
               "name": "LtpaToken2",
               "value":
  "HKCS9t9ZVnfVaQJrYxgJV7fKYZIAbxx7bFJwUk1W6+SiE=="
             }
           ],
           "queryString": [
             {
               "name": "invalidatesso",
               "value": "1?uisessionid=11"
             },
             {
               "name": "timeout",
               "value": "1"
             }
           ],
           "headersSize": 1432
         },
         "response": {
           "status": 200,
           "statusText": "OK",
           "httpVersion": "HTTP/1.1",
           "headers": [
             {
               "name": "X-Powered-By",
               "value": "Servlet/3.1"
             },
             {
               "name": "X-Frame-Options",
               "value": "SAMEORIGIN"
             },
             {
               "name": "X-Content-Type-Options",
               "value": "nosniff"
             },
             {
               "name": "X-XSS-Protection",
               "value": "1"
             },
             {
               "name": "Access-Control-Allow-Origin",
               "value": "https://mx-ad-srv.fyre.ibm.com/adfs/ls/I
  dpInitiatedSignOn.aspx?loginToRP=https://max-sso-7611-1.fyre.ib
  m.com:9443/samlsps/acs"
             },
             {
  
  -----------------------------------------------------
  EXPECTED RESULT: call correct logout URL when session timeout
  occurs in environments using the SAML logoutUrl
  
  ENVIRONMENT (SYSTEM INFO):
  Current version:
  App Server	IBM WebSphere Application Server 9.0.0.10
  Version
  Tivoli's process automation engine 7.6.1.1-IFIX20191121-0609
  Build 20190514-1348 DB Build V7611-365 HFDB Build HF7611-03
  IBM Maximo Asset Management Work Centers 7.6.0.4 Build $build$
  DB Build V7604-119
  IBM Maximo Asset Management Scheduler 7.6.7.3 Build
  20190514-1348 DB Build V7673-78 HFDB Build HF7673-09
  IBM Maximo Anywhere 7.6.3.1 Build 20190120_034018-0500 DB Build
  V7631-01
  IBM Tpae Integration Framework 7.6.1.1 Build 20190419-2330 DB
  Build V7611-01
  IBM Maximo Asset Management 7.6.1.1 Build 20190514-1348 DB Build
  V7611-01
  IBM Maximo for Oil and Gas 7.6.1.0-20190401-1324 Build
  20161020-0803 DB Build V7610-139 HFDB Build HF7610-37
  IoT Connection Utility 7.6.0.2 Build 20190426-2206 DB Build
  V7602-07
  IBM Maximo Enterprise Adapter for SAP Applications 7.6.1.0 Build
  201807051659 DB Build V7610-01
  TPAE OSLC Object Structure 7.6.3.1 Build 20190120_033959-0500 DB
  Build V7631-01
  Server OS	Windows Server 2016 10.0
  Server DB	Oracle 12.2 (Oracle Database 12c Enterprise Edition
  Release 12.2.0.1.0 - 64bit Production)
  -------------------------------------
  

Local fix

Problem summary

• ****************************************************************
  * USERS AFFECTED:                                              *
  * Maximo users                                                 *
  ****************************************************************
  * PROBLEM DESCRIPTION:                                         *
  * The logout URL is incorrect when a session times out in      *
  * environments using SAML.                                     *
  ****************************************************************
  

Problem conclusion

• _The fix for this APAR is contained in the following maintenance
  package: release\fix pack for Release 7.6.1.3 Product_
  

Temporary fix

Comments

APAR Information

• APAR is sysrouted FROM one or more of the following:

• APAR is sysrouted TO one or more of the following:

Fix information

• Fixed component name

  MAXIMO SYSTEMS

• Fixed component ID

  5724R46AV

Applicable component levels