4.8.6 Blocking Access to the User Portal Page

This information is for the legacy user portal page only. You cannot block the default user portal page.

If a user is already authenticated and accesses Identity Server, the user is presented with Identity Server user portal page.

This page provides information about the logged-in user:

  • Any federations this user has established with third-party service providers

  • Identity attributes such as Liberty Personal or employee profile attributes, Access Manager credential, or custom profile attributes

  • Policy attributes that users or administrators have selected to share with other service providers

You might want to prevent users from seeing this page for the following reasons:

  • Security: Users accessing this page have access to sensitive information that administrators might want to restrict such as the user’s attributes and federations with other third-party SAML or Liberty providers.

  • Help Desk Support: Most users have no need to access the information presented in this page. As a result, they might be confused if they see it. By preventing access to the page, any potential calls into the help desk are avoided.

When you enable the legacy, mode. all end user login pages use the legacy UI. However, there are several places where Access Manager Appliance issues the URL/nidp and shows the portal page. This is because in the index.html file for the nidp webapp there is a redirect from /nidp to /nidp/portal.

To block the legacy user portal page:

  1. Ensure that you create the WEB-INF/legacy directory. For more information, see Logging in with the Legacy Customized Portal.

  2. As a system administrator, edit the /webapp/index.html file.

  3. Change the line:

    <meta http-equiv="refresh" content="0; URL=portal">

    to:

    <meta http-equiv="refresh" content="0; URL=app">
  4. Save the /webapp/index.html file.

After this change takes place, the only way to access the legacy user portal page is to enter the URL in the browser of /nidp/portal.