After 8.5 upgrade checkSession problem

adrion5 · November 28, 2025, 3:35pm

After 8.5 upgrade checkSession problem

After updating to 8.5 we have a problem with a looping checkSession error after session-timeout . Has anyone had this issue?

The problem is that it seems to happen randomly, in my opinion.

4607789 The system has encountered a serious error while processing your request. Report the following incident code to your system administrator: 4607789 SailPointBundleLibrary.js:40:9056
Error: [$templateRequest:tpload] Failed to load template: util/modal-alert.html (HTTP status: undefined undefined)

d ‘’/iiq_test/ui/js/bundles/SailPointBundleLibrary.js?fb6698fe9f4-20250709-205815:38
j ‘’/iiq_test/ui/js/bundles/SailPointBundleLibrary.js?fb6698fe9f4-20250709-205815:40
i ‘’/iiq_test/ui/js/bundles/SailPointBundleLibrary.js?fb6698fe9f4-20250709-205815:40
k ‘’/iiq_test/ui/js/bundles/SailPointBundleLibrary.js?fb6698fe9f4-20250709-205815:40
$digest ‘’/iiq_test/ui/js/bundles/SailPointBundleLibrary.js?fb6698fe9f4-20250709-205815:40
$apply ‘’/iiq_test/ui/js/bundles/SailPointBundleLibrary.js?fb6698fe9f4-20250709-205815:40
g ‘’/iiq_test/ui/js/bundles/SailPointBundleLibrary.js?fb6698fe9f4-20250709-205815:39
r ‘’/iiq_test/ui/js/bundles/SailPointBundleLibrary.js?fb6698fe9f4-20250709-205815:40
onload ‘’/iiq_test/ui/js/bundles/SailPointBundleLibrary.js?fb6698fe9f4-20250709-205815:40
b ‘’/iiq_test/ui/js/bundles/SailPointBundleLibrary.js?fb6698fe9f4-20250709-205815:40
w ‘’/iiq_test/ui/js/bundles/SailPointBundleLibrary.js?fb6698fe9f4-20250709-205815:39
j ‘’/iiq_test/ui/js/bundles/SailPointBundleLibrary.js?fb6698fe9f4-20250709-205815:39
i ‘’/iiq_test/ui/js/bundles/SailPointBundleLibrary.js?fb6698fe9f4-20250709-205815:40
k ‘’/iiq_test/ui/js/bundles/SailPointBundleLibrary.js?fb6698fe9f4-20250709-205815:40
$digest ‘’/iiq_test/ui/js/bundles/SailPointBundleLibrary.js?fb6698fe9f4-20250709-205815:40
$apply ‘’/iiq_test/ui/js/bundles/SailPointBundleLibrary.js?fb6698fe9f4-20250709-205815:40
j ‘’/iiq_test/ui/js/bundles/SailPointBundleLibrary.js?fb6698fe9f4-20250709-205815:41
b ‘’/iiq_test/ui/js/bundles/SailPointBundleLibrary.js?fb6698fe9f4-20250709-205815:40
d ‘’/iiq_test/ui/js/bundles/SailPointBundleLibrary.js?fb6698fe9f4-20250709-205815:38
SailPointBundleLibrary.js:40:9056
XHRGET
‘’/iiq_test/ui/rest/checkSession
[HTTP/1.1 500 32ms]

naveenkumar3 · November 28, 2025, 11:41pm

Hi Adrian,

This is an issue while doing upgrade, as i have also faced it. You need to add the below system config xml from debug. Add the below entry and then try.

<entry key="noIdpSameSiteNone" value="true"/>

adrion5 · December 8, 2025, 8:37am

Unfortunately, the error is still occurring on my side.

naveenkumar3 · December 8, 2025, 10:44am

Do you see the similar error in the logs or issue exactly same or do you see other behaviour??

adrion5 · December 9, 2025, 9:18pm

Only behaviour is the spam in log
for now i use log4j2
Because my database can be full in 3-4h

logger.allExceptionMapper.name=sailpoint.rest.ui.jaxrs.AllExceptionMapper
logger.allExceptionMapper.level=off
logger.allExceptionMapper.additivity=false

[ERROR] 2025-12-09 22:10:24.400 [http-nio-8080-exec-1] sailpoint.rest.ui.jaxrs.AllExceptionMapper.logException:25 - Uncaught JAX-RS exception.
javax.ws.rs.NotFoundException: HTTP 404 Not Found
at org.glassfish.jersey.server.ServerRuntime$1.run(ServerRuntime.java:252) [jersey-server-2.35.jar:?]
at org.glassfish.jersey.internal.Errors$1.call(Errors.java:248) [jersey-common-2.35.jar:?]
at org.glassfish.jersey.internal.Errors$1.call(Errors.java:244) [jersey-common-2.35.jar:?]
at org.glassfish.jersey.internal.Errors.process(Errors.java:292) [jersey-common-2.35.jar:?]
at org.glassfish.jersey.internal.Errors.process(Errors.java:274) [jersey-common-2.35.jar:?]
at org.glassfish.jersey.internal.Errors.process(Errors.java:244) [jersey-common-2.35.jar:?]
at org.glassfish.jersey.process.internal.RequestScope.runInScope(RequestScope.java:265) [jersey-common-2.35.jar:?]
at org.glassfish.jersey.server.ServerRuntime.process(ServerRuntime.java:234) [jersey-server-2.35.jar:?]
at org.glassfish.jersey.server.ApplicationHandler.handle(ApplicationHandler.java:684) [jersey-server-2.35.jar:?]
at org.glassfish.jersey.servlet.WebComponent.serviceImpl(WebComponent.java:394) [jersey-container-servlet-core-2.35.jar:?]
at org.glassfish.jersey.servlet.WebComponent.service(WebComponent.java:346) [jersey-container-servlet-core-2.35.jar:?]
at org.glassfish.jersey.servlet.ServletContainer.service(ServletContainer.java:366) [jersey-container-servlet-core-2.35.jar:?]
at org.glassfish.jersey.servlet.ServletContainer.service(ServletContainer.java:319) [jersey-container-servlet-core-2.35.jar:?]
at org.glassfish.jersey.servlet.ServletContainer.service(ServletContainer.java:205) [jersey-container-servlet-core-2.35.jar:?]
at org.apache.catalina.core.ApplicationFilterChain.internalDoFilter(ApplicationFilterChain.java:197) [catalina.jar:9.0.112]
at org.apache.catalina.core.ApplicationFilterChain.doFilter(ApplicationFilterChain.java:142) [catalina.jar:9.0.112]
at org.apache.tomcat.websocket.server.WsFilter.doFilter(WsFilter.java:51) [tomcat-websocket.jar:9.0.112]
at org.apache.catalina.core.ApplicationFilterChain.internalDoFilter(ApplicationFilterChain.java:166) [catalina.jar:9.0.112]
at org.apache.catalina.core.ApplicationFilterChain.doFilter(ApplicationFilterChain.java:142) [catalina.jar:9.0.112]
at org.apache.catalina.filters.HttpHeaderSecurityFilter.doFilter(HttpHeaderSecurityFilter.java:129) [catalina.jar:9.0.112]
at org.apache.catalina.core.ApplicationFilterChain.internalDoFilter(ApplicationFilterChain.java:166) [catalina.jar:9.0.112]
at org.apache.catalina.core.ApplicationFilterChain.doFilter(ApplicationFilterChain.java:142) [catalina.jar:9.0.112]
at sailpoint.web.SailPointResponseFilter.doFilter(SailPointResponseFilter.java:99) [classes/:8.5 Build fb6698fe9f4-20250709-205815]
at org.apache.catalina.core.ApplicationFilterChain.internalDoFilter(ApplicationFilterChain.java:166) [catalina.jar:9.0.112]
at org.apache.catalina.core.ApplicationFilterChain.doFilter(ApplicationFilterChain.java:142) [catalina.jar:9.0.112]
at sailpoint.rest.jaxrs.MethodOverrideFilter.doFilter(MethodOverrideFilter.java:90) [identityiq.jar:8.5 Build fb6698fe9f4-20250709-205815]
at org.apache.catalina.core.ApplicationFilterChain.internalDoFilter(ApplicationFilterChain.java:166) [catalina.jar:9.0.112]
at org.apache.catalina.core.ApplicationFilterChain.doFilter(ApplicationFilterChain.java:142) [catalina.jar:9.0.112]
at sailpoint.rest.RestCsrfValidationFilter.doFilter(RestCsrfValidationFilter.java:71) [identityiq.jar:8.5 Build fb6698fe9f4-20250709-205815]
at org.apache.catalina.core.ApplicationFilterChain.internalDoFilter(ApplicationFilterChain.java:166) [catalina.jar:9.0.112]
at org.apache.catalina.core.ApplicationFilterChain.doFilter(ApplicationFilterChain.java:142) [catalina.jar:9.0.112]
at sailpoint.rest.AuthenticationFilter.doFilter(AuthenticationFilter.java:109) [identityiq.jar:8.5 Build fb6698fe9f4-20250709-205815]
at org.apache.catalina.core.ApplicationFilterChain.internalDoFilter(ApplicationFilterChain.java:166) [catalina.jar:9.0.112]
at org.apache.catalina.core.ApplicationFilterChain.doFilter(ApplicationFilterChain.java:142) [catalina.jar:9.0.112]
at sailpoint.web.TraversalVulnerabilityFilter.doFilter(TraversalVulnerabilityFilter.java:69) [identityiq.jar:8.5 Build fb6698fe9f4-20250709-205815]
at org.apache.catalina.core.ApplicationFilterChain.internalDoFilter(ApplicationFilterChain.java:166) [catalina.jar:9.0.112]
at org.apache.catalina.core.ApplicationFilterChain.doFilter(ApplicationFilterChain.java:142) [catalina.jar:9.0.112]
at sailpoint.web.EntraProxyTeamsHeaderFilter.doFilter(EntraProxyTeamsHeaderFilter.java:105) [identityiq.jar:8.5 Build fb6698fe9f4-20250709-205815]
at org.apache.catalina.core.ApplicationFilterChain.internalDoFilter(ApplicationFilterChain.java:166) [catalina.jar:9.0.112]
at org.apache.catalina.core.ApplicationFilterChain.doFilter(ApplicationFilterChain.java:142) [catalina.jar:9.0.112]
at sailpoint.web.SailPointContextRequestFilter.doFilter(SailPointContextRequestFilter.java:68) [identityiq.jar:8.5 Build fb6698fe9f4-20250709-205815]
at org.apache.catalina.core.ApplicationFilterChain.internalDoFilter(ApplicationFilterChain.java:166) [catalina.jar:9.0.112]
at org.apache.catalina.core.ApplicationFilterChain.doFilter(ApplicationFilterChain.java:142) [catalina.jar:9.0.112]
at sailpoint.web.SailPointPollingRequestFilter.doFilter(SailPointPollingRequestFilter.java:158) [identityiq.jar:8.5 Build fb6698fe9f4-20250709-205815]
at org.apache.catalina.core.ApplicationFilterChain.internalDoFilter(ApplicationFilterChain.java:166) [catalina.jar:9.0.112]
at org.apache.catalina.core.ApplicationFilterChain.doFilter(ApplicationFilterChain.java:142) [catalina.jar:9.0.112]
at sailpoint.web.ResponseHeaderFilter.doFilter(ResponseHeaderFilter.java:63) [identityiq.jar:8.5 Build fb6698fe9f4-20250709-205815]
at org.apache.catalina.core.ApplicationFilterChain.internalDoFilter(ApplicationFilterChain.java:166) [catalina.jar:9.0.112]
at org.apache.catalina.core.ApplicationFilterChain.doFilter(ApplicationFilterChain.java:142) [catalina.jar:9.0.112]
at org.springframework.web.filter.CharacterEncodingFilter.doFilterInternal(CharacterEncodingFilter.java:201) [spring-web-5.3.39.jar:5.3.39]
at org.springframework.web.filter.OncePerRequestFilter.doFilter(OncePerRequestFilter.java:117) [spring-web-5.3.39.jar:5.3.39]
at org.apache.catalina.core.ApplicationFilterChain.internalDoFilter(ApplicationFilterChain.java:166) [catalina.jar:9.0.112]
at org.apache.catalina.core.ApplicationFilterChain.doFilter(ApplicationFilterChain.java:142) [catalina.jar:9.0.112]
at org.apache.catalina.core.StandardWrapperValve.invoke(StandardWrapperValve.java:166) [catalina.jar:9.0.112]
at org.apache.catalina.core.StandardContextValve.invoke(StandardContextValve.java:88) [catalina.jar:9.0.112]
at org.apache.catalina.authenticator.AuthenticatorBase.invoke(AuthenticatorBase.java:481) [catalina.jar:9.0.112]
at org.apache.catalina.core.StandardHostValve.invoke(StandardHostValve.java:127) [catalina.jar:9.0.112]
at org.apache.catalina.valves.ErrorReportValve.invoke(ErrorReportValve.java:83) [catalina.jar:9.0.112]
at org.apache.catalina.valves.AbstractAccessLogValve.invoke(AbstractAccessLogValve.java:643) [catalina.jar:9.0.112]
at org.apache.catalina.core.StandardEngineValve.invoke(StandardEngineValve.java:72) [catalina.jar:9.0.112]
at org.apache.catalina.connector.CoyoteAdapter.service(CoyoteAdapter.java:344) [catalina.jar:9.0.112]
at org.apache.coyote.http11.Http11Processor.service(Http11Processor.java:398) [tomcat-coyote.jar:9.0.112]
at org.apache.coyote.AbstractProcessorLight.process(AbstractProcessorLight.java:63) [tomcat-coyote.jar:9.0.112]
at org.apache.coyote.AbstractProtocol$ConnectionHandler.process(AbstractProtocol.java:935) [tomcat-coyote.jar:9.0.112]
at org.apache.tomcat.util.net.NioEndpoint$SocketProcessor.doRun(NioEndpoint.java:1831) [tomcat-coyote.jar:9.0.112]
at org.apache.tomcat.util.net.SocketProcessorBase.run(SocketProcessorBase.java:52) [tomcat-coyote.jar:9.0.112]
at org.apache.tomcat.util.threads.ThreadPoolExecutor.runWorker(ThreadPoolExecutor.java:973) [tomcat-util.jar:9.0.112]
at org.apache.tomcat.util.threads.ThreadPoolExecutor$Worker.run(ThreadPoolExecutor.java:491) [tomcat-util.jar:9.0.112]
at org.apache.tomcat.util.threads.TaskThread$WrappingRunnable.run(TaskThread.java:63) [tomcat-util.jar:9.0.112]
at java.lang.Thread.run(Thread.java:840) [?:?]

kennycheng · December 15, 2025, 6:55am

Hi @adrion5 ,

We’re experiencing a similar issue, once the session expires, the /checkSession endpoint is triggered endlessly. More than 10k in just one minute.

kennycheng · December 15, 2025, 6:59am

Steps to reproduce the issue:

Open two tabs in the same browser window, then open the second tab after 5 minutes.

Tab 1: Home page (http://localhost:8080/identityiq/home.jsf)
Tab 2: IdentityRequest page (http://localhost:8080/identityiq/identityRequest/identityRequest.js)

When the warning of session expiration in Tab1 pops up, extend the session before it expired
Took no action in Tab 2, allowing it to expire naturally

kennycheng · December 15, 2025, 7:01am

When the session is not extended, it expires the session by calling /checkSession and 408 returned. No spamming of /checkSession occurred.

naveenkumar3 · December 17, 2025, 12:25am

can you please add below entry also in systemconfiguration from debug and test it. It should fix .

<entry key="ui.sessionTimeoutCheckEnabled" value="false"/>

kennycheng · December 18, 2025, 3:18am

Some analysis:

/checkSession should not be called if the session gets extended. It is a fake URL for the purpose of invalidating the session.

The timeout of the window does not reset when user click “Ok” in the Session Expiration Warning popup.
Since the session is extended and the window does not notice the timeout reset. The /checkSession URL gets triggered and send to the backend. That’s why error about 404 Not Found thrown in the log.

kennycheng · December 18, 2025, 7:37am

Temporary Fix:

Add SailPoint.disableEarlyWarning to scriptData.xhtml

          ...

          SailPoint.disableEarlyWarning = true;
        </script>
      </ui:fragment>
    </ui:composition>
  </h:head>
</html>

Add disableEarlyWarning as condition to resetTimeout function in SailPointBundle.js

(m.resetTimeout = function () {
  var a = f + 3e4,
  c = 3e5,
  d = a - c,
  e = window.location.hash;
  if (e !== n) {
    var g = { hash: e };
      j.post(i + "/ui/rest/redirect/hash", g), (n = e);
  }
  this.timeoutPromise && b.cancel(this.timeoutPromise),
  this.warningPromise && b.cancel(this.warningPromise),
  (l = Date.now() + a),
  (this.timeoutPromise = b(this.showTimeoutDialog, a)),
  (!window.SailPoint.disableEarlyWarning && d > 0) && 
    (this.warningPromise = b(this.showWarningDialog, d));
  }),
...

Now the user should be unable to extend the session

To handle 500 status code in SailPointBundle.js

(m.showTimeoutDialog = function () {
  j
    .get(i + "/ui/rest/checkSession", { handledErrors: [408, 500] })
    .catch(function () {
      SailPoint.NotificationMenuItem &&
      SailPoint.NotificationMenuItem.cancelNotification();
    }),
...

jophisaliascna · January 8, 2026, 10:07pm

we added “noIdpSameSiteNone = true and ui.sessionTimeoutCheckEnabled = false” . but still seeing these errors continuously in the syslog. any other option to suppress this error.

naveenkumar3 · January 10, 2026, 11:55pm

Did you try this one ??

jophisaliascna · January 11, 2026, 1:48am

looks like your suggestion didnt come through.. are you referring to javascript changes??

naveenkumar3 · January 11, 2026, 11:12am

ENtry needs to be added in systemconfiguration from debug and test it. It should fix .

zoltans · January 21, 2026, 9:21am

Changing ui.sessionTimeoutCheckEnabled to false stops the checkSession requests flooding IIQ.

I haven’t tested if it works for already existing sessions, but new sessions will stop sending the request after a request timeout response.

mike_hovis · January 21, 2026, 6:01pm

This is a known issue with 8.5/8.5p1, see bug IIQSR-954. Feel free to open tickets w/ support to get further resolution.

SaruRavi84 · March 17, 2026, 6:18am

we added “noIdpSameSiteNone = true and ui.sessionTimeoutCheckEnabled = false” . but still seeing these errors continuously in the syslog. any other option to suppress this error. — Whats the alternative and E-Fix is ready for this bug ?

neel193 · March 17, 2026, 6:48am

@SaruRavi84 You can open a ticket to Sailpoint Support and ask status for bug: IQSR-954? If they are releasing efix, then it would not be for all. You need to reach out to Sailpoint to get the efix.

QZF168 · April 1, 2026, 5:35pm

Did anyone get a permanent/official fix for this issue? Our database is geting 200,000 calls to syslog with the javax.ws.rs.NotFoundException: HTTP 404 Not Found stack trace

Topic		Replies	Views
Method not found error after 8.4 upgrade IIQ Discussion and Questions identityiq , provisioning	17	259	December 14, 2025
Identityiq 404 error IIQ Discussion and Questions identityiq	21	406	November 16, 2025
Upgrade 8.3P3 to P5 issue IIQ Discussion and Questions identityiq , access-requests	13	252	September 17, 2025
Remove Access not showing roles/entitlements IIQ Discussion and Questions identityiq	11	171	July 20, 2025
IIQ 8.5 SAML SSO timing out IIQ Discussion and Questions identityiq	8	163	March 21, 2026

After 8.5 upgrade checkSession problem

After 8.5 upgrade checkSession problem

After updating to 8.5 we have a problem with a looping checkSession error after session-timeout . Has anyone had this issue?

Related topics