hello, have been working with the CIS2 API in INT for a few weeks now, however have just today had the following error,
CIS2 login flow redirects the browser to the “select your login method” screen as usual but upon selecting “smartcard” the browser pops a native login dialog for http://localhost:43847 rather than the expected behaviour of the NHS credential management popup for PIN entry
i’ve tried restarting my laptop, connecting and reconnecting the HID omnikey, clearing cache and all permissions for https://am.nhsint.auth-ptl.cis2.spineservices.nhs.uk/ domain but no effect on outcome. this is in chrome. i’ve also tried in Edge but that doesn’t even load any content at the https://am.nhsint.auth-ptl.cis2.spineservices.nhs.uk/ domain. any advice would be appreciated, thanks
Browsers including edge and chrome have added additional protections for accessing localhost. You now have to approve that the site is trusted to access localhost - which is how CIS2 Auth communicates with the IA/CM .
See our troubleshooting page here https://digital.nhs.uk/services/care-identity-service/setting-up-and-troubleshooting/set-up-and-troubleshoot-credential-management-and-smartcard-connect
Thanks John for your reply. I went through the steps as suggested on the troubleshooting page but to no avail for Chrome. however this did solve the issue for Edge, so it was definitely 3rd party cookies block which was causing the issue there.
perhaps chrome has some additional flags or settings around 3rd party cookies which i cannot see or are set at the enterprise level. i do find it strange though because it was all working fine up until a few days ago, and 3rd party cookies changes have been around for the past few months at least i believe.