ChannelSecure SiteMinder

[Daredeviljpr]

1. We have the ChannelSecure SiteMinder agent that provides login authentication to external users of the application 2) After user logs in, an HTTP request is generated for the Redirect application that sits on the DMZ. This is a web application that implements the IHttpHandler interface. It performs URL rewriting and generates request to the AES application. It also routes the response from the AES application back to the client. 3) Now after the session times out, and the page is posted, we get a HTTP 404 Page not found error. We have a mechanism to redirect the user to an error or login page if the session times out. But in this case, it does not seem to work. 4) HOWEVER, after you get the 404 error, if you simply refresh the page, it redirects to the logout page. 5) There are exceptions being thrown and caught when the session times out.