After 8.5 upgrade checkSession problem

adrion5 · November 28, 2025, 3:35pm

After 8.5 upgrade checkSession problem

After updating to 8.5 we have a problem with a looping checkSession error after session-timeout . Has anyone had this issue?

The problem is that it seems to happen randomly, in my opinion.

4607789 The system has encountered a serious error while processing your request. Report the following incident code to your system administrator: 4607789 SailPointBundleLibrary.js:40:9056
Error: [$templateRequest:tpload] Failed to load template: util/modal-alert.html (HTTP status: undefined undefined)

d ‘’/iiq_test/ui/js/bundles/SailPointBundleLibrary.js?fb6698fe9f4-20250709-205815:38
j ‘’/iiq_test/ui/js/bundles/SailPointBundleLibrary.js?fb6698fe9f4-20250709-205815:40
i ‘’/iiq_test/ui/js/bundles/SailPointBundleLibrary.js?fb6698fe9f4-20250709-205815:40
k ‘’/iiq_test/ui/js/bundles/SailPointBundleLibrary.js?fb6698fe9f4-20250709-205815:40
$digest ‘’/iiq_test/ui/js/bundles/SailPointBundleLibrary.js?fb6698fe9f4-20250709-205815:40
$apply ‘’/iiq_test/ui/js/bundles/SailPointBundleLibrary.js?fb6698fe9f4-20250709-205815:40
g ‘’/iiq_test/ui/js/bundles/SailPointBundleLibrary.js?fb6698fe9f4-20250709-205815:39
r ‘’/iiq_test/ui/js/bundles/SailPointBundleLibrary.js?fb6698fe9f4-20250709-205815:40
onload ‘’/iiq_test/ui/js/bundles/SailPointBundleLibrary.js?fb6698fe9f4-20250709-205815:40
b ‘’/iiq_test/ui/js/bundles/SailPointBundleLibrary.js?fb6698fe9f4-20250709-205815:40
w ‘’/iiq_test/ui/js/bundles/SailPointBundleLibrary.js?fb6698fe9f4-20250709-205815:39
j ‘’/iiq_test/ui/js/bundles/SailPointBundleLibrary.js?fb6698fe9f4-20250709-205815:39
i ‘’/iiq_test/ui/js/bundles/SailPointBundleLibrary.js?fb6698fe9f4-20250709-205815:40
k ‘’/iiq_test/ui/js/bundles/SailPointBundleLibrary.js?fb6698fe9f4-20250709-205815:40
$digest ‘’/iiq_test/ui/js/bundles/SailPointBundleLibrary.js?fb6698fe9f4-20250709-205815:40
$apply ‘’/iiq_test/ui/js/bundles/SailPointBundleLibrary.js?fb6698fe9f4-20250709-205815:40
j ‘’/iiq_test/ui/js/bundles/SailPointBundleLibrary.js?fb6698fe9f4-20250709-205815:41
b ‘’/iiq_test/ui/js/bundles/SailPointBundleLibrary.js?fb6698fe9f4-20250709-205815:40
d ‘’/iiq_test/ui/js/bundles/SailPointBundleLibrary.js?fb6698fe9f4-20250709-205815:38
SailPointBundleLibrary.js:40:9056
XHRGET
‘’/iiq_test/ui/rest/checkSession
[HTTP/1.1 500 32ms]

naveenkumar3 · November 28, 2025, 11:41pm

Hi Adrian,

This is an issue while doing upgrade, as i have also faced it. You need to add the below system config xml from debug. Add the below entry and then try.

<entry key="noIdpSameSiteNone" value="true"/>

adrion5 · December 8, 2025, 8:37am

Unfortunately, the error is still occurring on my side.

naveenkumar3 · December 8, 2025, 10:44am

Do you see the similar error in the logs or issue exactly same or do you see other behaviour??

adrion5 · December 9, 2025, 9:18pm

Only behaviour is the spam in log
for now i use log4j2
Because my database can be full in 3-4h

logger.allExceptionMapper.name=sailpoint.rest.ui.jaxrs.AllExceptionMapper
logger.allExceptionMapper.level=off
logger.allExceptionMapper.additivity=false

[ERROR] 2025-12-09 22:10:24.400 [http-nio-8080-exec-1] sailpoint.rest.ui.jaxrs.AllExceptionMapper.logException:25 - Uncaught JAX-RS exception.
javax.ws.rs.NotFoundException: HTTP 404 Not Found
at org.glassfish.jersey.server.ServerRuntime$1.run(ServerRuntime.java:252) [jersey-server-2.35.jar:?]
at org.glassfish.jersey.internal.Errors$1.call(Errors.java:248) [jersey-common-2.35.jar:?]
at org.glassfish.jersey.internal.Errors$1.call(Errors.java:244) [jersey-common-2.35.jar:?]
at org.glassfish.jersey.internal.Errors.process(Errors.java:292) [jersey-common-2.35.jar:?]
at org.glassfish.jersey.internal.Errors.process(Errors.java:274) [jersey-common-2.35.jar:?]
at org.glassfish.jersey.internal.Errors.process(Errors.java:244) [jersey-common-2.35.jar:?]
at org.glassfish.jersey.process.internal.RequestScope.runInScope(RequestScope.java:265) [jersey-common-2.35.jar:?]
at org.glassfish.jersey.server.ServerRuntime.process(ServerRuntime.java:234) [jersey-server-2.35.jar:?]
at org.glassfish.jersey.server.ApplicationHandler.handle(ApplicationHandler.java:684) [jersey-server-2.35.jar:?]
at org.glassfish.jersey.servlet.WebComponent.serviceImpl(WebComponent.java:394) [jersey-container-servlet-core-2.35.jar:?]
at org.glassfish.jersey.servlet.WebComponent.service(WebComponent.java:346) [jersey-container-servlet-core-2.35.jar:?]
at org.glassfish.jersey.servlet.ServletContainer.service(ServletContainer.java:366) [jersey-container-servlet-core-2.35.jar:?]
at org.glassfish.jersey.servlet.ServletContainer.service(ServletContainer.java:319) [jersey-container-servlet-core-2.35.jar:?]
at org.glassfish.jersey.servlet.ServletContainer.service(ServletContainer.java:205) [jersey-container-servlet-core-2.35.jar:?]
at org.apache.catalina.core.ApplicationFilterChain.internalDoFilter(ApplicationFilterChain.java:197) [catalina.jar:9.0.112]
at org.apache.catalina.core.ApplicationFilterChain.doFilter(ApplicationFilterChain.java:142) [catalina.jar:9.0.112]
at org.apache.tomcat.websocket.server.WsFilter.doFilter(WsFilter.java:51) [tomcat-websocket.jar:9.0.112]
at org.apache.catalina.core.ApplicationFilterChain.internalDoFilter(ApplicationFilterChain.java:166) [catalina.jar:9.0.112]
at org.apache.catalina.core.ApplicationFilterChain.doFilter(ApplicationFilterChain.java:142) [catalina.jar:9.0.112]
at org.apache.catalina.filters.HttpHeaderSecurityFilter.doFilter(HttpHeaderSecurityFilter.java:129) [catalina.jar:9.0.112]
at org.apache.catalina.core.ApplicationFilterChain.internalDoFilter(ApplicationFilterChain.java:166) [catalina.jar:9.0.112]
at org.apache.catalina.core.ApplicationFilterChain.doFilter(ApplicationFilterChain.java:142) [catalina.jar:9.0.112]
at sailpoint.web.SailPointResponseFilter.doFilter(SailPointResponseFilter.java:99) [classes/:8.5 Build fb6698fe9f4-20250709-205815]
at org.apache.catalina.core.ApplicationFilterChain.internalDoFilter(ApplicationFilterChain.java:166) [catalina.jar:9.0.112]
at org.apache.catalina.core.ApplicationFilterChain.doFilter(ApplicationFilterChain.java:142) [catalina.jar:9.0.112]
at sailpoint.rest.jaxrs.MethodOverrideFilter.doFilter(MethodOverrideFilter.java:90) [identityiq.jar:8.5 Build fb6698fe9f4-20250709-205815]
at org.apache.catalina.core.ApplicationFilterChain.internalDoFilter(ApplicationFilterChain.java:166) [catalina.jar:9.0.112]
at org.apache.catalina.core.ApplicationFilterChain.doFilter(ApplicationFilterChain.java:142) [catalina.jar:9.0.112]
at sailpoint.rest.RestCsrfValidationFilter.doFilter(RestCsrfValidationFilter.java:71) [identityiq.jar:8.5 Build fb6698fe9f4-20250709-205815]
at org.apache.catalina.core.ApplicationFilterChain.internalDoFilter(ApplicationFilterChain.java:166) [catalina.jar:9.0.112]
at org.apache.catalina.core.ApplicationFilterChain.doFilter(ApplicationFilterChain.java:142) [catalina.jar:9.0.112]
at sailpoint.rest.AuthenticationFilter.doFilter(AuthenticationFilter.java:109) [identityiq.jar:8.5 Build fb6698fe9f4-20250709-205815]
at org.apache.catalina.core.ApplicationFilterChain.internalDoFilter(ApplicationFilterChain.java:166) [catalina.jar:9.0.112]
at org.apache.catalina.core.ApplicationFilterChain.doFilter(ApplicationFilterChain.java:142) [catalina.jar:9.0.112]
at sailpoint.web.TraversalVulnerabilityFilter.doFilter(TraversalVulnerabilityFilter.java:69) [identityiq.jar:8.5 Build fb6698fe9f4-20250709-205815]
at org.apache.catalina.core.ApplicationFilterChain.internalDoFilter(ApplicationFilterChain.java:166) [catalina.jar:9.0.112]
at org.apache.catalina.core.ApplicationFilterChain.doFilter(ApplicationFilterChain.java:142) [catalina.jar:9.0.112]
at sailpoint.web.EntraProxyTeamsHeaderFilter.doFilter(EntraProxyTeamsHeaderFilter.java:105) [identityiq.jar:8.5 Build fb6698fe9f4-20250709-205815]
at org.apache.catalina.core.ApplicationFilterChain.internalDoFilter(ApplicationFilterChain.java:166) [catalina.jar:9.0.112]
at org.apache.catalina.core.ApplicationFilterChain.doFilter(ApplicationFilterChain.java:142) [catalina.jar:9.0.112]
at sailpoint.web.SailPointContextRequestFilter.doFilter(SailPointContextRequestFilter.java:68) [identityiq.jar:8.5 Build fb6698fe9f4-20250709-205815]
at org.apache.catalina.core.ApplicationFilterChain.internalDoFilter(ApplicationFilterChain.java:166) [catalina.jar:9.0.112]
at org.apache.catalina.core.ApplicationFilterChain.doFilter(ApplicationFilterChain.java:142) [catalina.jar:9.0.112]
at sailpoint.web.SailPointPollingRequestFilter.doFilter(SailPointPollingRequestFilter.java:158) [identityiq.jar:8.5 Build fb6698fe9f4-20250709-205815]
at org.apache.catalina.core.ApplicationFilterChain.internalDoFilter(ApplicationFilterChain.java:166) [catalina.jar:9.0.112]
at org.apache.catalina.core.ApplicationFilterChain.doFilter(ApplicationFilterChain.java:142) [catalina.jar:9.0.112]
at sailpoint.web.ResponseHeaderFilter.doFilter(ResponseHeaderFilter.java:63) [identityiq.jar:8.5 Build fb6698fe9f4-20250709-205815]
at org.apache.catalina.core.ApplicationFilterChain.internalDoFilter(ApplicationFilterChain.java:166) [catalina.jar:9.0.112]
at org.apache.catalina.core.ApplicationFilterChain.doFilter(ApplicationFilterChain.java:142) [catalina.jar:9.0.112]
at org.springframework.web.filter.CharacterEncodingFilter.doFilterInternal(CharacterEncodingFilter.java:201) [spring-web-5.3.39.jar:5.3.39]
at org.springframework.web.filter.OncePerRequestFilter.doFilter(OncePerRequestFilter.java:117) [spring-web-5.3.39.jar:5.3.39]
at org.apache.catalina.core.ApplicationFilterChain.internalDoFilter(ApplicationFilterChain.java:166) [catalina.jar:9.0.112]
at org.apache.catalina.core.ApplicationFilterChain.doFilter(ApplicationFilterChain.java:142) [catalina.jar:9.0.112]
at org.apache.catalina.core.StandardWrapperValve.invoke(StandardWrapperValve.java:166) [catalina.jar:9.0.112]
at org.apache.catalina.core.StandardContextValve.invoke(StandardContextValve.java:88) [catalina.jar:9.0.112]
at org.apache.catalina.authenticator.AuthenticatorBase.invoke(AuthenticatorBase.java:481) [catalina.jar:9.0.112]
at org.apache.catalina.core.StandardHostValve.invoke(StandardHostValve.java:127) [catalina.jar:9.0.112]
at org.apache.catalina.valves.ErrorReportValve.invoke(ErrorReportValve.java:83) [catalina.jar:9.0.112]
at org.apache.catalina.valves.AbstractAccessLogValve.invoke(AbstractAccessLogValve.java:643) [catalina.jar:9.0.112]
at org.apache.catalina.core.StandardEngineValve.invoke(StandardEngineValve.java:72) [catalina.jar:9.0.112]
at org.apache.catalina.connector.CoyoteAdapter.service(CoyoteAdapter.java:344) [catalina.jar:9.0.112]
at org.apache.coyote.http11.Http11Processor.service(Http11Processor.java:398) [tomcat-coyote.jar:9.0.112]
at org.apache.coyote.AbstractProcessorLight.process(AbstractProcessorLight.java:63) [tomcat-coyote.jar:9.0.112]
at org.apache.coyote.AbstractProtocol$ConnectionHandler.process(AbstractProtocol.java:935) [tomcat-coyote.jar:9.0.112]
at org.apache.tomcat.util.net.NioEndpoint$SocketProcessor.doRun(NioEndpoint.java:1831) [tomcat-coyote.jar:9.0.112]
at org.apache.tomcat.util.net.SocketProcessorBase.run(SocketProcessorBase.java:52) [tomcat-coyote.jar:9.0.112]
at org.apache.tomcat.util.threads.ThreadPoolExecutor.runWorker(ThreadPoolExecutor.java:973) [tomcat-util.jar:9.0.112]
at org.apache.tomcat.util.threads.ThreadPoolExecutor$Worker.run(ThreadPoolExecutor.java:491) [tomcat-util.jar:9.0.112]
at org.apache.tomcat.util.threads.TaskThread$WrappingRunnable.run(TaskThread.java:63) [tomcat-util.jar:9.0.112]
at java.lang.Thread.run(Thread.java:840) [?:?]

kennycheng · December 15, 2025, 6:55am

Hi @adrion5 ,

We’re experiencing a similar issue, once the session expires, the /checkSession endpoint is triggered endlessly. More than 10k in just one minute.

kennycheng · December 15, 2025, 6:59am

Steps to reproduce the issue:

Open two tabs in the same browser window, then open the second tab after 5 minutes.

Tab 1: Home page (http://localhost:8080/identityiq/home.jsf)
Tab 2: IdentityRequest page (http://localhost:8080/identityiq/identityRequest/identityRequest.js)

When the warning of session expiration in Tab1 pops up, extend the session before it expired
Took no action in Tab 2, allowing it to expire naturally

kennycheng · December 15, 2025, 7:01am

When the session is not extended, it expires the session by calling /checkSession and 408 returned. No spamming of /checkSession occurred.

naveenkumar3 · December 17, 2025, 12:25am

can you please add below entry also in systemconfiguration from debug and test it. It should fix .

<entry key="ui.sessionTimeoutCheckEnabled" value="false"/>

kennycheng · December 18, 2025, 3:18am

Some analysis:

/checkSession should not be called if the session gets extended. It is a fake URL for the purpose of invalidating the session.

The timeout of the window does not reset when user click “Ok” in the Session Expiration Warning popup.
Since the session is extended and the window does not notice the timeout reset. The /checkSession URL gets triggered and send to the backend. That’s why error about 404 Not Found thrown in the log.

kennycheng · December 18, 2025, 7:37am

Temporary Fix:

Add SailPoint.disableEarlyWarning to scriptData.xhtml

          ...

          SailPoint.disableEarlyWarning = true;
        </script>
      </ui:fragment>
    </ui:composition>
  </h:head>
</html>

Add disableEarlyWarning as condition to resetTimeout function in SailPointBundle.js

(m.resetTimeout = function () {
  var a = f + 3e4,
  c = 3e5,
  d = a - c,
  e = window.location.hash;
  if (e !== n) {
    var g = { hash: e };
      j.post(i + "/ui/rest/redirect/hash", g), (n = e);
  }
  this.timeoutPromise && b.cancel(this.timeoutPromise),
  this.warningPromise && b.cancel(this.warningPromise),
  (l = Date.now() + a),
  (this.timeoutPromise = b(this.showTimeoutDialog, a)),
  (!window.SailPoint.disableEarlyWarning && d > 0) && 
    (this.warningPromise = b(this.showWarningDialog, d));
  }),
...

Now the user should be unable to extend the session

To handle 500 status code in SailPointBundle.js

(m.showTimeoutDialog = function () {
  j
    .get(i + "/ui/rest/checkSession", { handledErrors: [408, 500] })
    .catch(function () {
      SailPoint.NotificationMenuItem &&
      SailPoint.NotificationMenuItem.cancelNotification();
    }),
...

jophisaliascna · January 8, 2026, 10:07pm

we added “noIdpSameSiteNone = true and ui.sessionTimeoutCheckEnabled = false” . but still seeing these errors continuously in the syslog. any other option to suppress this error.

naveenkumar3 · January 10, 2026, 11:55pm

Did you try this one ??

jophisaliascna · January 11, 2026, 1:48am

looks like your suggestion didnt come through.. are you referring to javascript changes??

naveenkumar3 · January 11, 2026, 11:12am

ENtry needs to be added in systemconfiguration from debug and test it. It should fix .

Topic		Replies	Views
Method not found error after 8.4 upgrade IIQ Discussion and Questions identityiq , provisioning	17	182	December 14, 2025
Red error message when entering Advanced Analytics IIQ Discussion and Questions identityiq	3	703	January 26, 2024
Identityiq 404 error IIQ Discussion and Questions identityiq	21	311	November 16, 2025
Tomcat automatically shut down for SailPoint 8.4 after the upgrade IIQ Discussion and Questions apis , identityiq	7	182	July 31, 2025
Remove Access not showing roles/entitlements IIQ Discussion and Questions identityiq	11	143	July 20, 2025

After 8.5 upgrade checkSession problem

After 8.5 upgrade checkSession problem

After updating to 8.5 we have a problem with a looping checkSession error after session-timeout . Has anyone had this issue?

Related topics