Hi everyone,
we are trying to run MediaCo On-Premise, the sample application for testing Pega Constellation SDKs. While the Embedded Mode works, we are stuck at the login screen in Portal Mode.
After OAuth authentication, Pega redirects to PRAuth instead of “/portal”. It seems like an authorization issue.
Has anyone successfully set up MediaCo On-Premise with Portal Mode? Any ideas on what might be missing?
Thanks in advance for any help! 
Best,
Nora Gerth
@NoraG17147743 @NoraG17147743
are you able to access the MSP GenAI Buddy? Please see if the answer helps you.
Configuring authentication of the Pega Web mashup channel | Pega Academy?
This is a GenAI-powered tool. All generated answers require validation against the provided references.
Here are several configuration points to check that could resolve your issue:
Application Configuration
- Verify the application is properly configured to use Constellation UI:
- In Dev Studio, click on your application name and select “Definition”
- Expand the “Advanced” section
- In the “UI Runtime” section, ensure “Pega Platform (Constellation UI)” is selected
- Click “Generate routing table” and save the changes
OAuth and Authentication Settings
- Check your OAuth 2.0 client registration:
- Ensure the redirect URIs include both “/portal” and the PRAuth endpoint
- Verify the access token and revoke token endpoints are correctly configured
- Review authentication service configuration:
- Make sure the authentication URL points to the correct external login page
- Confirm the access group specified in your Constellation implementation has the necessary permissions
HTTPS Requirements
- Verify HTTPS is being enforced:
- Constellation applications require HTTPS; using HTTP will cause authentication issues
- Check that all URLs used in your configuration use HTTPS protocol
Portal Mode-Specific Settings
- Check Portal Mode configuration:
- Review the routing configuration to ensure “/portal” is properly mapped
- Verify that the Portal Mode authentication flow is correctly set up in your application
Dynamic System Settings
- Review relevant Dynamic System Settings:
- Check settings related to authentication and portal redirections
- Specifically look for settings that control OAuth flows and portal access
The key issue appears to be that the application is defaulting to PRAuth-based authentication instead of completing the portal authentication flow. This can happen when there’s a mismatch between the OAuth configuration and the application’s authentication settings.
References: