Home › Blogs › danderson's blog

SSO to SSB mixed content error in IE

Mon, 2008-11-17 15:18 — danderson
0
No votes yet

Hi,

Using our SSO link to SSB in IE results in constant prompts to 'Allow Mixed Content.' Though we have isolated an easy workaround that requires changing a few settings in IE, management is delaying the release of SSO until we can find way to modify this behavior through a code fix. The logic on their end is that if the behavior is not present when we manually log on to SSB through Luminis, it should not happen because we SSO to SSB.

Does anyone have an experience or fixes they can share? I searched the LumTech archives and found inquiries, but no fixes.

Thanks in advance,
Denise

Comments

Comment viewing options

Select your preferred way to display the comments and click "Save settings" to activate your changes.
Mon, 2008-11-17 15:29 — baumli

mixed content error in IE

This is a huge problem on our site, and one of the reasons that people won't use the portal. They get tired of that warning on every tab they click on. Sure you can edit the settings in IE, but if a user has to do that, then most likely they just won't come back. Our main website is not https, so anytime that we link in an image, or page, it throws that warning.

Not exactly the same situation, but similar problem. I too would like to know what people are doing for this.

Mon, 2008-11-17 15:45 — Dana

just make changes to your

just make changes to your i.e. security preferences to allow mixed mode..you have it set to prompt by default, just enable and its fine.

Mon, 2008-11-17 15:58 — Dana

exact instructions for i.e.

exact instructions for i.e. 7 probably the same for i.e. 6:

internet options/security tab/custom level/display mixed content:enable

Tue, 2008-11-18 06:05 — rbalara

2 problems

There's 2 problems with that solution:

1) It involves going to each computer or making each user change a security setting. Most users don't know what browser they are using, so it's a major turn-off that will drive people away in masses.

2) It's there for a reason: Normally when you see https:// in the address bar, you assume the data is encrypted. The "Mixed Mode" alert is basically saying that something on the https address is being sent via http (not encrypted). It's annoying how MS implemented it (no "always remember" option or anything), but it is there for a reason and probably shouldn't be turned off unless absolutely needed.

Tue, 2008-11-18 09:22 — Jeepgirlnj

We had that problem

We had that problem and it turned out that we had http set in on our Banner side as the SSB link, so even though it was really https we were getting security prompts.

Tue, 2008-11-18 13:35 — danderson

followup questions

A few questions just to make sure I understand your response:

Is your Luminis portal on http or https?

We are running Luminis on http and Banner Self Service on https.

Here is a sample of the link we use in Luminis to connect to SSB using SSO:

http://(luminis server name)/cp/ip/login?sys=sctssb&url=https://(banner self service server name)/pls/PROD/twbkwbis.P_GenMenu?name=bmenu.P_MainMnu

Does yours look similar? Or is there a problem with our link?

Thank you in advance for any insight you can share with us on this. It has really been causing a stir.

Denise

Denise Anderson
Portal Administrator
Wright State University

Tue, 2008-11-18 14:47 — danderson

Update

We finally realized what Melissa meant by changing the link on the banner side. Go in to Banner Self Services, go to the Web Tailor menu, go to Web Tailor parameters and change CPBASEURL. All we did was change http to https and it worked!!

Thanks for giving us that start Melissa.

denise