Summary

Error Messages

1. After configuring the out of the box Pega IAC Gadget and previewing it throws exception:  “There has been an issue, please contact your administrator”
2. With WebSeal enabled, when accessing the gadget  from a web page, getting the following error:

            Redirection appears to be in a loop, terminating request: http://servername.com/prweb/IAC/!OSGLICPM/$STANDARD?
            pyactivitypzZZZ=648931ba2d4cb1c3fd3632a26487a..

Steps to Reproduce

1. After configuring the out of the box Pega IAC Gadget and preview throws exception:  

1. With WebSeal enabled, Login in GIPORTAL and click 360 view and we will get below error message. The GIPORTAL is the web application and the 360 view is the page where the gadget is displayed

Root Cause

1. Customer was using a web server in front of the application server hosting the Pega application. Customer was using the default out of the box authentication servlet IAC however in webserver plugin-cfg.xml, they were using mapping servlet name as “IACAuth” used prior to their Pega upgrade from 5.x. to 7.1.9. The mapping servlet entries for IAC was missing
    
2. There is a potential architectural issue with the current setup of Gateway. The WebSeal authentication is being triggered twice before reaching the PRPC server. The request traverse from browser to Gateway via WebSeal and from Gateway to PRPC again via WebSeal where it’s failing during 2nd time authentication 

Resolution

1. For the first issue of the out of the box Pega IAC functionality was fixed after adding the missing authentication servlet mapping IAC webserver plugin-cfg.xml
2. Bypass the Gateway and directly access the Pega Server by setting the Gadget parameter "Pega.web.config.gatewayURL" to the relative URL as follows: