End user login failures after upgrade to Qlik Sense Enterprise Feb 2019 Patch 2 or later

Authentication fails when accessing a mashup. Users may be redirect to a Windows Authentication login screen.

Environment

• Qlik Sense Enterprise February Patch 2 and later

 

Browsers are not allowed to overwrite a secure cookie with an insecure cookie causing the session not to be set up properly therefore resulting in this needed change.

A change was performed in the the February Path 2 release that could affect clients in complex environments such as those with Load Balancers with mixed modes (i.e. HTTPS to HTTP). 

This change is documented in the Feb Patch 2 release notes. See item ID QLIK-87951 for details:

Separate cookies for http and https
Description: Two different cookies for secure and insecure connections. Proxy suffixes the session cookie name with -HTTP if users access the system over http.

In addition, the Qlik Sense Help was updated to include: 
This article is written to emphasize these changes and where they were documented. 

As a broad statement, clients may need to alter their session header custom configurations (adding -HTTP) to accommodate this change to fix authentication issues.