Browser redirecting to wrong location

I am trying to enable secure lockdown on IE.

I have allowed:

https://*.domain.com/* which allows access to everywhere I need access to.

My homepage is https://communities.domain.com/ballot.

When my homepage opens and i click on the login link I am taken to a login page.  When I login, I am redirected to the wrong page.  On the login page, I can see the redirect in the URL:  extweb&goto=https://communities.domain.com

My expectation is that when I login, I am redirected back https://communities.domain.com/ballot

When I do not have secure lockdown enabled and I login, I am redirected back to https://communities.domain.com/ballot, which is my homepage.

When I enabled secure lockdown, I am redirected to the main parent page https://communities.domain.com

Why does enabling secure lockdown redirect me to an undesired page?  I don't understand how enabling secure lockdown could affect that behavior.

It is likely that the browser in the lockdown state cannot access the page that the web server is redirecting it to. There may be an interim page that you cannot see that needs to be whitelisted. Please check the source code of the log-in page to see if you can find the redirect URL, or contact the website developer.

Thanks for the reply.  I have all sites in the source whitelisted.

When I hover over the Login button, I can see a tag in the lower left corner that indicates some javascript will be executed when I click login.  Not sure if it's some kind of javascript problem or not.

But what is odd is that on my homepage and click Login, when I get to the login screen, I can see in the URL where /extweb&goto= is already defined.  So the decision about where I am routed after I submit my credentials has already been decided before I enter my credentials.

The culprit URL may be defined in the JavaScript files that you cannot view in the source of the page. Your best bet is to contact the web developers and ask them what URLs need to be whitlisted for this process to be successful.

If there was a page in that the browser could not access when in lockdown wouldn't the browser give me an error message rather than just arbitrarily deciding to reroute me the parent page of where I am trying to login.?

Ok, thanks again.

Normally, yes, but there may be some client-side code that does redirecting.

The developer of the page says that jive is saving the referrer page and driving my URL extweb&goto=https://communities.domain.com



Since my IE home page is https://communities.domain.com/ballot
and I click on  Login from that page, it should drive it to https://communities.domain.com/ballot
after I login.

If I reload my homepage and then click Login, the page I'm taken to is correct (https://communities.domain.com/ballot).

He said the problem i'm seeing could be some type of caching problem, but I've set everything in IE to clear when IE closes.

I'm only redirected to the wrong page when I use Secure Lockdown.  Any other suggestions?

Does this still happen when you disable the whitelisting (Allowed Sites) feature?

When I uncheck/disable white listing, it works as it should.  I am redirected to the correct page after submitting credentials