Hello Binh Cao,

Do you currently have HSTS enabled in LifeTime, as well as the Secure Cookie setting?

Also, after having checked Single Sign-On Between App Types, have you re-applied the configuration to your applications? An easy way to do this is to create a new Solution in Service Center, associate all modules with it, then click Apply Settings.

If you've already done that, then are your applications both using the same User Provider Module (properties at the module level in Service Studio)? And when you redirect to your React application, are you redirecting to "/" of the application or to "/Login"

Hi Craig,

Thanks for your reply. 

I figured out that SSO not working in my scenario because my Login button is Ajax Submit and I redirect the user to another page after successful login. When the Login button is Ajax Submit, the Authentication Cookies (nr1 and nr2) are not set after the login. They will be set if either the Login button Submit rather than Ajax Submit or there is no Ajax refresh and Redirect in the Login logic. And SSO will work. 

I'm not sure if it is a bug or a behavior by design.

The problem for us is not using Ajax (Submit or Refresh) will break some cosmetic behaviors on our Login page.

Hi Binh Cao,

I’m pretty sure the issue you had is related to the below mentioned bug fixes that are included in Platform Server 11.10.0 or later.

Fixed SSO between different app types so the roles are correctly updated and users are no longer blocked from accessing the screens in the session. (RTAF-3182)

Fixed authenticated user losing the roles while navigating from a Traditional to a Reactive app, with Single Sign-On activated. (RAR-307)

Hope this helps!

Regards,

Nordin

Hi Nordin,

Thanks for your reply.

I'm afraid it's not the case. I believe the fix in v 11.10.0  is for the user roles only. In our scenario, the Reactive app doesn't get even the UserId. However, we will try to update the Platform Server and see if our issue has been fixed.

Currently I've implemented a work-around with a hidden Submit button and it can temporarily fix the issue. We still have issue with roles though since we are using the older version of the Platform Server.