Hello,

Customer upgraded to WC 11 a few months back and has been dealing with this error when users log in:

In looking at the Web Client Server Ops logs we see the following errors:

"Operation: /laserfiche/Error.aspx?aspxerrorpath=/laserfiche/"

  "Message: ID3206: A SignInResponse message may only redirect within the current web application: 'https://Customers.FQDN:443/Laserfiche' is not allowed."

This is the process that occurs with the users, regardless of Browser/Version/Clear Cache and Cookies:

• It only occurs on a fresh login (no history)
• It occurs only the one time regardless if using the Windows Authentication or manually typing in with credentials
• After the first login, subsequent logins or interaction seems to redirect just fine.

We have checked the settings per the SSO Whitepaper and everything looks fine.

We did the following edit in IIS to see if it would help with this, but did not:

1. On the LFDS server open IIS
2. Expand Sites->Default Web Site
3. Click on the LFDSSTS site
4. Double-Click on Authentication to open the properties
5. Click on Windows Authentication, then select Providers
6. Highlight Negotiate and remove it->Click OK
7. Go to  Application Pools
8. Click on LicenseManagerSTSAppPool and Stop/Start
9. Test the login with Windows Authentication

Appreciate any feedback you have,

Jeff Curtis