Authentication Manager 8.x Risk Based Authentication (RBA) logon via the RSA Authentication Agent for Citrix StoreFront gives error: Please logon again or close your browser and retry

[#1]

Article Number

000034191

Applies To

RSA Product Set: SecurID
RSA Product/Service Type: Authentication Agent for Citrix
RSA Version/Condition: 1.0
 

Issue

When using RBA authentication with the RSA Authentication Agent for Citrix StoreFront to authenticate to Citrix StoreFront 3.0 some, but not all, users are seeing the following error:
 

An error occurred while processing your request.
Please logon again or close your browser and retry​

Image description

 Internet Explorer debug shows the following messages:

The attached page targets document mode 7. Some console APIs and features may not be available.
 
DOM7011: The code on this page disabled back and forward caching.  

HTML1203: <Domain> has been configured to run in Compatibility View through Group RSAAuthMgrRbaHelper

Image description

Cause

The Java script is running, but the site *.<domain> is listed in Compatibility View for Internet Explorer.

Resolution

With compatibility view enabled it appears the javascript does not input the username or password into the correct field on the Delegated Forms Authentication (DFA) page of the Citrix StoreFront server prior to hitting the logon button on the form, which generates the error message. 

Either disable compatibility mode, for this site or all sites, or try to sign into a different account that doesn't have the policy applied that adds *.<domain> to Compatibility View and RSA/RBA/StoreFront DFA all functioned normally.