Page tree
Skip to end of metadata
Go to start of metadata

To help solving problems during system development and support cases, it is possible to activate session information page on UAS.

Session information page is disabled by default. The reason for this is that this page exposes system version information, which in some cases may be a security risk.

Enable Session Information Page on UAS

To enable session information page on UAS:

  1. Enable Session Information Page on UAS. Set enabled to true.
    C:\Program Files\Ubisecure\ubilogin-sso\tomcat\webapps\uas\WEB-INF\web.xml

    <!-- Info --> 
      <servlet>
            <servlet-name>com.ubisecure.ubilogin.sso.ui.servlet.InfoServlet</servlet-name>
            <servlet-class>com.ubisecure.ubilogin.sso.ui.servlet.InfoServlet</servlet-class>
            <init-param>
                <param-name>enabled</param-name>
                <param-value>true</param-value>
            </init-param>
        </servlet>
  2. Activate the change by running update:
    C:\Program Files\Ubisecure\ubilogin-sso\ubilogin\config\tomcat> update.cmd

  3. Do an authentication request: open session information page from the web address
    https://{sso-server address}/uas/info

    Figure 1. Ubisecure SSO information page

To disable session information page on UAS:

  1. Disable Session Information Page on UAS. Set enabled to false.
    C:\Program Files\Ubisecure\ubilogin-sso\tomcat\webapps\uas\WEB-INF\web.xml

    <!-- Info --> 
      <servlet>
            <servlet-name>com.ubisecure.ubilogin.sso.ui.servlet.InfoServlet</servlet-name>
            <servlet-class>com.ubisecure.ubilogin.sso.ui.servlet.InfoServlet</servlet-class>
            <init-param>
                <param-name>enabled</param-name>
                <param-value>false</param-value>
            </init-param>
        </servlet>
  2. Activate the change by running update:
    C:\Program Files\Ubisecure\ubilogin-sso\ubilogin\config\tomcat> update.cmd

  3. Check that the page is disabled: check that the information page is not viewable with web browser at the address https://{sso-server address}/uas/info


  • No labels