Bug ID 471452: Access policy in progress with multiple tabs, landing URL set to the tab in which policy is completed.

Last Modified: Apr 10, 2019

Bug Tracker

Affected Product:  See more info
BIG-IP APM(all modules)

Known Affected Versions:
11.4.1, 11.5.1, 11.5.1 HF1, 11.5.1 HF10, 11.5.1 HF11, 11.5.1 HF2, 11.5.1 HF3, 11.5.1 HF4, 11.5.1 HF5, 11.6.0, 11.6.0 HF1, 11.6.0 HF2, 11.6.0 HF3, 11.6.0 HF4

Fixed In:
12.0.0, 11.6.0 HF5, 11.5.1 HF6

Opened: Jul 11, 2014
Severity: 4-Minor
Related AskF5 Article:
K16952

Symptoms

When URLs from multiple browser tabs start an access policy, the session is created with the landing URL from the first tab that started the session, not with URL that continued and finished creating the access session.

Impact

This may cause BIG-IP as SAML SP unable to establish a session with IdP. In the case of LTM and APM, the user is always redirected to the URL from first tab after policy execution finishes.

Conditions

Accessing the access policy VIP with different landing URLs before access policy session created. This causes the access policy to run from two different landing URLs.

Workaround

None.

Fix Information

When URLs from multiple browser tabs start an access policy, the landing URL is set to the URL from the browser that finished the access policy execution.

Behavior Change