Adobe Target visual experience composer VEC not able to load customer portal (password protected website)

[ajaym75199991]

We are handling customer's couple of websites public facing website as well as their customer's portal website which is hosted under subdomain of their public facing. On both websites we have personalization & recommendation use cases. Till one week back using VEC we were able to configuring A/B, XT on both websites. However since that week we are unable to load the customer portal website(password protected pages) in VEC. Application not loading beyond login page. Outside login and overall website behavior is normal and as per expectations. Public facing website is also working as expected in VEC.

Also earlier cross login session between portal and Adobe target VEC was also working fine where in we used to login into customer portal first in one tab and in separate tab (same browser) we used to browse portal in VEC and we used to configure respective activities on various pages of portal (login session was getting shared across 2 tabs).

This is also stopped working. When we tried to debug issues, we came across Google Chrome SameSite cookie enforcement policies impact the VEC, however we are not sure on this as till last week everything was working fine and suddenly it stopped. if we go with enforcement date by google on their samesite policy, they have rolled out that change in last year aug 2020 and we are facing issue now.

Kindly suggest the solution on this.

[Andrey_Osadchuk]

Have you tried to switch to EEC and log in in the Browse mode?

Or to use a Chrome extension to overwrite headers when using VEC mode?

[KeithF53 · Accepted solution]

Were you able to solve this issue? I have a similar problem where VEC is not able to open a password protected website.

When I try to log in through the VEC I get redirected to the session expired/forced logout page. 

I've used Resquestly to overwrite the headers, which used to work, but it does not work anymore.

Thanks,

Keith

[ajaym75199991]

Hi Keith

How i solved this problem basically cookies which are used while authentication process, all needs to be defined as SameSite=None; Secure

Example

Cookie anme is "sitesession" which might be holding sessionid for authenticated user. While setting this cookie these 2 paramters needs to set SameSite=None; Secure

It will work then