60
Views
7
Comments
Solved
How the user session login is different for service center and User application.

HI, Everyone.

On yesterday, Due to the security reasons i have updated my Personal Environment Password in User application.

Step i have taken:

1. I was able to login into the User application and application which are created inside the Environment with new password.

2. I was unable to login into the service center and service studio with new password still referring to old password

3. So i have also updated the password in OS portal , now i was able to login service center and service studio with new password 

What i noticed:

Both Service center and user application are operation in same personal environment and i have seen the application URL are some, but the how the user login session is handles differently.

If i logout in user application the service center application user session is still running but the other  application in same environment have got logout in same browser.

How the service center user session handle separately even it is running in same environment.

UserImage.jpg
Nani

Thank you, @Daniël Kuhlmann 

You mean the Application users and It users are managed differently because of personal environment i don't have access to User management in Life time and also login SSO is different, am i correct ?

2024-07-05 14-16-55
Daniël Kuhlmann
 
MVP

It is not managed differently for a personal environment, the same segregation of identity access is also in the paid licenses. The only difference is that when you spin up a personal environment, initially OutSystems sets all the accounts having the same user name (your community email, and password). Then when people start changing on of the account passwords the confusion starts.

The good news is, OutSystems acknowledge the complexity of this OutSystems 11 solution, and made it much easier in ODC where you have one account for everything.

2020-07-21 19-28-50
Rajat Agrawal
Champion

Hi @Nani 

May be one of the reason behind that in OutSystems, the User Application and Service Center are treated as separate applications, even though they exist within the same environment. The session handling for each application can be managed differently (e.g., different cookie handling, session expiry rules, and authentication policies). This is why logging out of one application doesn't necessarily log you out of the other, even if they are in the same environment.

Regards ,

Rajat

UserImage.jpg
Nani

Thank you, @Daniël Kuhlmann 

You mean the Application users and It users are managed differently because of personal environment i don't have access to User management in Life time and also login SSO is different, am i correct ?

2024-07-05 14-16-55
Daniël Kuhlmann
 
MVP

It is not managed differently for a personal environment, the same segregation of identity access is also in the paid licenses. The only difference is that when you spin up a personal environment, initially OutSystems sets all the accounts having the same user name (your community email, and password). Then when people start changing on of the account passwords the confusion starts.

The good news is, OutSystems acknowledge the complexity of this OutSystems 11 solution, and made it much easier in ODC where you have one account for everything.

2016-04-22 00-29-45
Nuno Reis
 
MVP

To complement the information above:

-There are IT Users and Application Users.

-You were the system admin and use the applications with the same credentials. But in fact there were two accounts. Your Personal Environment created one of each for you. Something like Ids 2 and 5.

-When you change your Community email or password, your admin account (IT User) gets changed. Your Application User remains as it was.

2024-07-05 14-16-55
Daniël Kuhlmann
 
MVP

Correct, but if one changes his LT account password manually, I believe the community account password is not changed.

2016-04-22 00-29-45
Nuno Reis
 
MVP

Right. Never tried changing the IT User password from PE, but PE is only passive on this. 

Community GuidelinesBe kind and respectful, give credit to the original source of content, and search for duplicates before posting.