TFA | "Trust this browser" tweaks and troubleshooting

TFA | "Trust this browser" tweaks and troubleshooting

To disable or change number of days of "Trust this browser":

  1. Connect to the servicedesk database by following the steps below:
  1. For first time (since this entry is not present by default) run this INSERT query and restart SDP to set the days as 30:
Quote
insert into adsproductparams values(1, 'TFA_COOKIE_VALIDITY', '30');
  1. For next times, run this query (as this entry is present now) and restart SDP to update the number of days.
Quote
update adsproductparams set param_value='<days>' where param_name='TFA_COOKIE_VALIDITY';
Alert
To disable Trust this browser, set the days to 0.
Note: The max limit is 180 days. If you want to increase beyond that, please contact us.

Troubleshooting:

If TFA details need to be entered every time (after closing and opening browser / after reaching home or office / when IP changes) even if Trust this browser in enabled,

1. Check if "ADSTFA_xxxx" cookie is present on browser close and open: 
  1. After logging in with Trust the browser, right click and click Inspect and choose Application tab > Cookies
  2. Click on the SDP URL and check for the presence of ADSTFA_xxxx cookie

  1. Now, close all windows of your browser and open SDP and check if this cookie is present. If the cookie is not present, kindly follow this KB: https://pitstop.manageengine.com/portal/en/kb/articles/retain-sdp-logged-in-credentials-after-browser-restart
  2. If this is present, then go to step 2.

2. Check if cookie is removed when your IP changes.
  1. For versions below 14201, DHCP cases are not supported (SD-102970)
  2. Kindly upgrade to versions above 14201 to retain "keep me signed in" even if your IP changes.
  3. If you are above 14201 and still your issue is not resolved, please contact us.