Hi Adam,
Thank you for reaching out to us. We have investigated the issue you mentioned and found that it is related to an adjustment in the reverse proxy involving the Content Security Policy (CSP) in our latest update.
To help expedite our investigation, could you please send us the application and device logs, as well as details about the type of IED you are using and its version? This will assist us in resolving the issue more quickly.
Additionally, we have found a workaround that might help you while we work on a permanent solution. You can try the following:
Steps to implement the workaround:
Access your IEM > Edge Devices.
Click on "Discover a new experience" and locate the three dots for your IED.
Select "Enable Identity Federation."
Once enabled, assign the necessary roles to the group or user using the IEM User Management system.
Guide to assign roles: Assign Roles
The required permission will have the format: ie-device-<YourIEDName>
Guide on Identity Providers: Identity Providers
If you need any assistance, including implementing the workaround, please don’t hesitate to reach out. We are committed to resolving this issue as quickly as possible.
Thank you for your collaboration and patience.
Iván Castro Bernaza
Update - when you open the app, it can redirect you to home page. But then it tries to login via azure AD repedately.
When I open Console (F12), i get this error:
https://login.microsoftonline.com/<tentant_ID>/oauth2/v2.0/token' because it violates the following Content Security Policy directive: "default-src 'self'". Note that 'connect-src' was not explicitly set, so 'default-src' is used as a fallback.
This didn´t appeared in older versions of Siemens Industrial Edge. I also tried uploading new project in asp.net (default home a privacy page) onto newest edge version and everything worked fine (the app is without Azure AD login).
Hi Adam!
is it your used packages and frameworks updated?
Please check it and let me know when you have news,
Thanks for your efforts!
Hello Ivan!
The app was developed in Angular 18 (frontend) and .NET 8.0 (backend api). Before uploading to IEM, docker was updated to newest version. We are also using updates for IE from 12/24.
Is that what you meant? Or do you need any other information?
Thanks for your help