IBM Security Verify

 View Only
Expand all | Collapse all

WebSEAL+Infomap and Microsoft Word/Excel

  • 1.  WebSEAL+Infomap and Microsoft Word/Excel

    Posted Thu November 26, 2020 12:37 PM
    Hello
    Faced an interesting case
    We have configured WebSEAL 9.0.7 + Infomap

    Description of the error scenario.
    Users who come to WebSEAL are authenticated using Infomap. Everything works well, except for the case when the user clicked on the link inside the Word or Excel document
    I agree that the scenario is exotic, but there is such a thing. I repeat, link is inside a Word or Excel document
    What happens in the end? When the user clicked on LINK1 (target link to the application) inside a Word document, Word itself makes a pre-request, receives a 302 redirect to LINK2 and opens LINK2 in the browser. As a result, it turns out that the browser knows nothing about LINK1, and as a result, the user will never get into the target application.

    Question: are there any ways that would allow you to transfer LINK1 in a similar case ?​

    ------------------------------
    Ivan Goncharov
    ------------------------------


  • 2.  RE: WebSEAL+Infomap and Microsoft Word/Excel

    Posted Thu November 26, 2020 12:48 PM
    Hi Ivan,

    A bit of a long shot but there is a config option:

    enable-html-redirect = yes  (no is the default)

    which tells WebSEAL to use an HTML page with embedded script to perform redirects instead of using 302. Perhaps that would help you work with the strange behaviour of Word and Excel?

    Jon.

    ------------------------------
    Jon Harry
    Consulting IT Security Specialist
    IBM
    ------------------------------

    Original Message