Hi, since we have rolled out SSO (SAML) in 7.6.1.2 users are getting Reload errors, as well as 500 Internal Server Error (occasionally).

Has anyone seen this issue? And what was the fix?

Any help would be greatly appreciated

Steve, having a similar issue 7.6.1.3 and have a case logged with IBM

We are SSO via azure. We have been in this config for some time without issue but the problem started about 6 weeks ago getting browser reload error '0' or from time to time network error. Browser tools records err_ssl_protocol_error. Setting session or ui logs to debug we are seeing Invalid CSRF Token received for loadapp event, Setting CSRF security context to READONLY and allowing refresh of application. 
This is usually set after hit reload.

We have made changes in line with IBM documentation for same site cookies settings and also checked all CORS props settings, timeout settings.

I have validated that this issue occurs on edge current version using a generic VM excluded from group and enterprise policy, using the same VM the error does not occur for Firefox current version.

We believe that it is the edge CSRF Cookie which is being expired but I do not have a solution. I will post follow up info.

------------------------------
Rob Harding
Flinders Port Holdings
Outer Harbor
------------------------------

Follow up. IBM requested we update Websphere to latest version and iFix ( 9.0.5.18 ) which we did last week. Encountered a few errors on the upgrade but resolved those and the reload error has now disappeared for all users. IBM was not able to provide more specific information on this issue. 

Hi Steven

I had faced the same issue; did you find out the reason and solution

Thanks

Jason