Force refresh User Scope when Update User Group in IAS

[Andrew_Mai]

We currently have a problem with IAS. When we assign a new User Group in IAS, the new Scope will not apply on BTP, even through the user has logout and login again. The user must close the whole browser, then re-open the browser or login before it take effect. Is there a way that the scope will be update without closing the browser?

[gregorw]

Have you checked if the logout you've described actually also hits the IAS? I would suggest to check this via the developer tools. From which application do you logout?

[Andrew_Mai]

Hi Gregor,

We have the user trigger the logout through the logout endpoint in AppRouter.

From what I see in the Dev tools, the page will redirect to this endpoint:

https://cf-myapp.authentication.ap11.hana.ondemand.com/saml/SingleLogout/alias/cf-myapp.cf-ap11

[gregorw]

But you don't see requests to anything like accounts.ondemand.com?

[Andrew_Mai]

Hi Gregor,

It does trigger a GET Request to accounts.ondemand.com, I have capture the network trace when the user logout:

[Martina_K]

Hello Andrew,

please open a customer ticket for your problem and the SAP Support team might be able to help you.

Best regards,

Martina