No Authorization message when logging into E-Recruiting

[Former Member]

Hello,

We are running E-Recruiting 3.0, and have an interesting issue when an external or internal candidate attempts to logon to their start page a second time without first closing their browser. Once someone is logged into E-Recruiting, if they navigate outside of E-Recruiting, and then attempt to log back into E-Recruiting (without first closing their web browser), a message is returned that states "You do not have the required authorization to use this start page".

I attempted to run a trace, but did not find any authorizations objects missing from the role that is assigned to the candidates. Any assistance in resolving this issue would be greatly appreciated.

Thank you,

Leeanna Travis

[romanweise · Accepted solution]

Hello Leeanna,

when using bsp applications the browser is holding the user session (or better the authentification). So the browser keeps the user you logged on first even if you navigate outside of e-recruiting or have more browser windows opened (navigation should not work as bsp application require browser windows with deactivated navigation, url menu bar).

Example:

If a tester is creating a new requisition and therefore uses an user with internal candidate + recruiter auth. role and then wants to test an external application, the system will log him in with the recruiter user directly. As this user has no authorization for the external candidate startpage you get the error.

This goes so far that if you do an unregistered application this application will be created for the recruiter although you enter name and mailaddress for a new candidate.

This is usually a pure test topic and has to be communicated to the testers. Only in a few situations it is usefull to protect customer developments so they do not run / create an errornous behaviour if the tester forgets the logout.

The general behaviour that the browser keeps the session cannot be changed. If possible I usually have a firefox running for all web stuff I need the whole day and test e-recruiting in IE only.

Best Regards

Roman Weise

PS: please take care of hidden IE browsers like lotus notes client.

[Former Member · Accepted solution]

Roman,

I appreciate the information that you shared, but this does not really address my issue. As an example, I can go to another companies career page, and log onto their E-Recruiting system as an external candidate. I can then close my browser that has the E-Recruiting session open, and then click on the logon again on their career page (career page browser never closed). I am then successful in logging back into their E-Recruiting system as an external candidate.

When I attempt to do the exact same thing for our site, I get the Authorization error, and I have to close out of the career page browser and open up a new one to log back in.

Thanks,

Leeanna

[romanweise · Accepted solution]

Hallo Leeanna,

first of all you should try to find out which user is logging into the system. When you reach the page which displays that you are missing any authorization check the backend (e.g. SM04) which users have connections. Is it really the external candidate user which logs in or is there any "service user" which is accidently switched to? You will probably have to do this in a situation with low activity. It might be that there is a wrongly configured ICF service anywhere causing the problem.

Another try could be trouble with your referer. (I admit I used google to find your page). Replace the referer link [https://sub.dom.tld/registered] on the page by the direkt link to e-recruiting and in addition ensure that according to the recommendations e-recruiting is opened in a separated window with hidden navigation by using a java script (this will save you from a lot of trouble and SLG1 messages).

Best Regards

Roman Weise

[Former Member · Accepted solution]

Roman,

We replaced the referer link with the direct link, as you suggested, and that resolved the issue. We originally had it set up to open in a separate window with hidden navigation, but when we discovered our problem, we decided to have it open in the same window to lessen the chance that someone would attempt to log in twice without first closing the browser. We now have it opening in a separate window, and there is no longer an authorization issue if the end user attempts to log in multiple times. My webmaster did inform me that whatever they are using for our web service does not like java script, so I'm having to forgo that suggestion until they update our site later this summer.

Thanks again for your help.

Leeanna