Troubleshooting redirect URLs

Multiple redirect URLs can occur when a load balancer or reverse proxy is implemented.

Modifying the load balancer (or reverse proxy) for redirect URLs

If a BMC product is deployed behind a load balancer (or a reverse proxy), then the load balancer (or reverse proxy) must specify a BMC Atrium Single Sign-On redirect URL for the product agent. This modification is valid for both High Availability (HA) and non-HA environments.

Specify an HTTP Header with the name AtssoReturnLocation using the following syntax for the header value:

<protocol>://<fqdn.load.balancer>:<port>

Using load balancer (or reverse proxy) host names for redirect URLs

If BMC Atrium Single Sign-On is deployed behind a load balancer (or reverse proxy), the product agent logon and logoff configuration can be modified to use the load balancer (or reverse proxy) host names instead of the real FQDN host names. In this case, the client browser is forwarded to the load balancer (or reverse proxy) host name of the BMC Atrium Single Sign-On server. This modification is valid for both HA and non-HA environments.

Log into the BMC Atrium Single Sign-On Administrator console and edit the product agent's configuration. Use the following template for the new logon and logoff URLs, respectively:

Cookie name change for a HA node

In a BMC Atrium Single Sign-on HA environment, if a cookie name is changed for a particular BMC Atrium Single Sign-On node, restart the BMC Atrium Single Sign-On server.