Hi All,
I have add DIV mashup to open user portal, in IE able to open the portal, but in chrome i am getting “Third party cookies must be enabled for mashup to function” this error. Could you please suggest any configuration changes need to be done to make it work. We are using Pega 8.5.2 version
Is this happening in Google Chrome’s in incognito mode ( https://www.tripwire.com/state-of-security/security-data-protection/google-chrome-aims-to-keep-edge-over-browsers-with-latest-privacy-security-features/ )? If yes, then it is a Bug. For 8.5.2, the Bugs are already raised and it is fixed in 8.6.
In the Bug, Third party cookies reminder added for Mashup in incognito browsers
When working in incognito/private browser windows, attempting to use Mashup displayed a message indicating login credentials were not recognized (“Unknown password and/or username”). This was due to recent changes originating with the browsers regarding blocking third-party cookies which are necessary for Mashup to run. For informational purposes in the platform, a new API has been added which will check for the PegaRules cookie; if the cookie is not present, the message “Third party cookies must be enabled for Mashup to function.” will be displayed. This message may be customized by configuring the setting “pega.web.config.xCookiesDisabled” with the required message.
Thank you for response.
It is not working in normal chrome browser as well, we are getting same error. Could you please confirm is there any hotfix available for 8.5.2 version.
There is no HFix for the above. But before that please be sure that the issue is same. The Bug raised was specifically for incognito mode with “block 3rd party cookies” enabled.
Do you have the same setting for Chrome too?
@TashikaS - How can we customize this message “Third party cookies must enabled for Mashup to function.”.
As i see it is harcoded in a final rule.Attached PegaCompositeGadgetMgr.js in 8.5.3 version.
Could you please suggest what needs to be done to achieve this?
My suggestion would be,
Create a html file of your own and keep it in the webapps folder in the Tomcat server
Add you mash up code into that html file
Run the html file in the chrome browser or any other browser.
It worked for me.
But when I tried to use W3schools site and HTML code then I got the cookies error.
getting same error. is there solution
Please enable cookies in Dev Studio by following below steps it worked for me.
Click Configure > System > Settings > Cross-Site Request Forgery, enable the Enable samesite cookie attribute option and select None from the Samesite options list.
@Bipul Singh I have enabled third party cookies and did the CRSF settings as well. but the issue still persists, Do anyone able to work with Mash up?
Thank you for your quick response.
We are getting below mentioned message when we are opening mashup. Please let us know if any specific setting needs to change in the browser level.
Refer - How to enable 3rd-party cookies in Google Chrome browser – cloudHQ Support
For your browser Chrome is this enabled? Check if you disable then issue replicates?
@RavindraGande is this issue resolved? even i am facing same issue when Salesforce using Pega Mashup code. Please guide me how to resolve.
@PankajS3454 check DSS value for
Pega-Engine • security/csrf/samesitecookieattributevalue and it should be None
Have you tried the steps provided above from @DebapriyaC3594
