Search Support

Avoid support scams. We will never ask you to call or text a phone number or share personal information. Please report suspicious activity using the “Report Abuse” option.

Learn More

Firefox is triggering the wrong authentication trigger on a change password request by SiteMinder. We need help & can provide more details, thanks!

more options

Firefox version 66 and Siteminder version 12.8 SP2. REPORTED PROBLEM:

- users are prompted to change password based on password policy 
- users enter old password and then new password, confirm new password 
- click the change button and do no get the message 
   "your new password has been set. 
 Use this new password the next time you log into your account" 
  which should be displayed as part of authreason=23 referenced in 
  the oob password policy file smpwservices.fcc
Firefox version 66 and Siteminder version 12.8 SP2. REPORTED PROBLEM: - users are prompted to change password based on password policy - users enter old password and then new password, confirm new password - click the change button and do no get the message "your new password has been set. Use this new password the next time you log into your account" which should be displayed as part of authreason=23 referenced in the oob password policy file smpwservices.fcc

All Replies (5)

more options

Hi justin.linnan, can you reproduce the problem in a current version of Firefox? Either:

  • Firefox 71.0
  • Extended Support Release of Firefox 68 (68.3.0esr)

This could be difficult, but is there a demo page to test this functionality?

more options

Hi - my tech guys advised it is reproduceable in the versions that you mention below. Would you be able to join a conf call for <30 mins today?

more options

Hi Justin, I'm not the right person to join a call on this. You should consider filing a bug: https://bugzilla.mozilla.org/

more options

OK thanks. I opened a defect with Bugzilla. Note, my internal Support resource provided the following:

Good Afternoon Justin \ UTC Team \ Firefox support

Reported problem:

- customer has a password change policy in effect 
- user is prompted for a password change 
- the user changes the password but the page never confirms that the password has changed 
  i.e message expected 
       "your new password has been set. 

       Use this new password the next time you log into your account"

- even though the message is not displayed the user is able to login to the application using the 
  new password which indicates that Siteminder performed the change password task 

Please note:

- this works in IE, Chrome and Firefox
- it only Fails in firefox if the page is HTTPS and works successfully on HTTPS page 
- siteminder does not integrate with the Browser and as such does not distinguish how a password policy 
  should behave on a particular browser 

Main issue to investigate here:

- why is the Firebox page not displaying the
   1- Expected message 
       "your new password has been set. 
       Use this new password the next time you log into your account" 
   2- This has been tested locally and confirmed that both Http and Https pages works successfully 
      Firefox version this was tested on was version 70.0.1

Next Step:

 - test the issue against version 71 as recommended by firefox community support 
 - engage firefox support to assist. 
 - siteminder support is available and willing to assist with the issue.
more options

Sorry, this part is a little confusing:

justin.linnan said

Please note:
  • this works in IE, Chrome and Firefox
  • it only Fails in firefox if the page is HTTPS and works successfully on HTTPS page
Do you mean it fails if the page is HTTP (insecure)? Also, if you start the lines with * in your reply you can get a bulleted list.