Description
When a site uses a custom login page that redirects users to SAML SSO, users enrolling in Multi-Factor Authentication. could receive a 500 error.
Steps to Replicate
Login to Blackboard Learn as administrator
Open System Admin > Authentication
Open the Default authentication provider and select Edit
Confirm Multi-Factor Authentication is set to Active, then select Submit
Open System Admin > Users
Create a test user who has not previously enrolled in MFA and assign a known password
Confirm the site uses a custom login page that redirects users to the institution’s SAML SSO provider
Keep the administrator session open for cleanup
Open a new private or incognito browser window
Open the default Blackboard Learn login page
Enter the test user’s username and password and select Sign In
Observe the result during MFA enrolment
Observed Behavior:
The MFA enrolment page does not appear. Instead, the login request returns an error stating:“Cannot call sendRedirect() after the response has been committed.”
Expected Behvaior:
The MFA enrolment page appears and displays a QR code. The user can register an authenticator app, enter a valid six-digit code, and access Blackboard Learn.
Affected Versions
Learn 4000.17.0
Learn 4000.21.0
Learn 4001.0.0
Target Release
SaaS Fixed (4001.2.0)
