Symptoms

Up on integration of SSO with FNO, when trying to email licenses from End User Portal, user is being redirected to the SSO login page.

Diagnosis

It's been observed that from End User Portal of FNO when an attempt to email licenses was made, the user get's redirected to SSO login page and following error was thrown in FNO flexnet.log

2022-06-01 10:24:10,565 [default task-38] ERROR (util) [ADMN] SecurityUtil.setupThreadContext()-->Vulnerability Description : EP session should not be allowed to use PP resources:: sessionId = fXXXXXXXXXXXXXXXXXQQ

Solution

The error means if any End User Portal functionality if tries to access Producer Portal resources, it will invalidate the session and because of that user will be redirected to login page.

In other words, When the login context is for End User Portal but the request servlet path is redirected to or contains /operations instead of /operationsportal it leads to session invalidation and hence this error is reported.

So when the redirect URL for email license or Email Content URL was corrected with /operationsportal, user session got validated and user was continue to use the session.