I am seeing this strange behavior in sitecore CM. Recently, I am not able to login to sitecore. When I use the correct username and password, sitecore just refreshes and the login page is shown again. Please find the fiddler trace below for the same.

Based on the fiddler logs , it looks like a redirect is causing the issue. I checked the redirect config, but I don’t see any specific entry for sitecore. If I give a wrong username and password, error message is thrown as expected. Can you please guide me on this. Fiddler Trace:

  • Do you have any custom redirect rules on your IIS? – Alan Płócieniak Nov 3 '16 at 22:08
  • Did you override any pipeline for processing requests? – Michael West Nov 3 '16 at 22:14
  • Do you have any cookies from other sites that share a cookie domain? If so simply clear all your cookies. – Joe Bissol Nov 3 '16 at 22:16
  • Have you recently added/modified any pipelines? Or perhaps back track the changes prior to this happening? – Jacky Lau Nov 3 '16 at 22:18
  • @AlanPłócieniak - We dont have a custom redirect rules at the IIS level. – Karthik Nov 4 '16 at 3:45

One reason for this behavior may be having an httpCookies domain setting in web.config that doesn't match the domain you are using to login to the Sitecore client, or having httpCookies requireSSL set to true while login in on http instead of https.

  • Hi @Ben Verhees, Thanks for the input. The issue was due to setting "requireSSL" attribute = true from httpCookies tag in web.config. Previous value:<httpCookies requireSSL="true" httpOnlyCookies="true"/> Changed Value:<httpCookies httpOnlyCookies="true"/> Our server infrastrutucture team has made some changes due to which this issue has occured. we reached out to them and they reverted the changes from their side. – Karthik Dec 27 '16 at 4:04

I saw this behavior once, it turned out that the authentication entry in my Web.config had been changed. I think it had been set to mode="Forms", which Sitecore doesn't like.

  • This works in most cases. In our case, the issue was due to the setting "requireSSL" attribute = true from httpCookies tag in web.config. – Karthik Dec 27 '16 at 4:11

This happened to me once on Chrome so I moved to another browser which worked fine (firefox). I later learned that clearing the cookies (and maybe cache on Chrome) could fix the problem.

  • I tried in a different browser(incognito/private) as well. It did not help. – Karthik Nov 8 '16 at 16:34

Not sure if this qualifies as a new answer I apologies but the following things are possibilities to check... If mentioned before, at least consolidated here.

  1. Clear cookies/ try new browser
  2. Disable any redirect to rewrite rules in your web config.
  3. Disable any error page logic

When this has happened to me in the past its been one of the three above that gets me back in business.

Not the answer you're looking for? Browse other questions tagged or ask your own question.