# CSRF validation failed - installing plugin

**URL:** <https://developer.sailpoint.com/discuss/t/csrf-validation-failed-installing-plugin/13920>\
**Category:** IIQ Discussion and Questions\
**Tags:** workflows, identityiq, apis\
**Created:** [July 6, 2023, 8:31am UTC](https://developer.sailpoint.com/discuss/t/csrf-validation-failed-installing-plugin/13920 "2023-07-06T08:31:28Z")\
**Posts on this page:** 5\
**Page:** 1

<div class="post-metadata">

**Author:** ![antdru94](https://avatars.discourse-cdn.com/v4/letter/a/3da27b/32.png) [@antdru94](https://developer.sailpoint.com/discuss/u/antdru94)\
**Post date:** [July 6, 2023, 8:31am UTC](https://developer.sailpoint.com/discuss/t/csrf-validation-failed-installing-plugin/13920/1 "2023-07-06T08:31:28Z")

</div>

Hello,

I get the following error when installing a developed plugin. Has anyone encountered this error before? This started when I remade to project into a Maven to include java class files and package jars. This is how the logs look:

 ![image](https://global.discourse-cdn.com/sailpoint/original/2X/0/09e65f432cf4c5eeebdff8425e57ffe113b8c3c5.png)  
 ![image](https://global.discourse-cdn.com/sailpoint/original/2X/0/0ae0fc4eab71194901aa18495c4f90f8de94eea2.png)  
 ![image](https://global.discourse-cdn.com/sailpoint/original/2X/2/2387afaf209b8fb50bbb30793ad52fb3b1d547ea.png)

Thank you

---

<div class="post-metadata">

**Author:** ![aditya\_pathak](https://sea1.discourse-cdn.com/sailpoint/discuss/user_avatar/developer.sailpoint.com/aditya_pathak/32/2758_2.png) [@aditya\_pathak](https://developer.sailpoint.com/discuss/u/aditya_pathak)\
**Post date:** [July 7, 2023, 3:24am UTC](https://developer.sailpoint.com/discuss/t/csrf-validation-failed-installing-plugin/13920/2 "2023-07-07T03:24:36Z")

</div>

CSRF token expires when the session expires.

This is just a security feature in IIQ implementation and is not a major error.

---

<div class="post-metadata">

**Author:** ![antdru94](https://avatars.discourse-cdn.com/v4/letter/a/3da27b/32.png) [@antdru94](https://developer.sailpoint.com/discuss/u/antdru94)\
**Post date:** [July 7, 2023, 7:30am UTC](https://developer.sailpoint.com/discuss/t/csrf-validation-failed-installing-plugin/13920/3 "2023-07-07T07:30:04Z")

</div>

I see thank you. It only happens with this plugin, I thought something was off with the source code. Does the CSRF token renew at some point or do you have to do that manually? Several hours later I could still not install the plugin.

---

<div class="post-metadata">

**Author:** ![aditya\_pathak](https://sea1.discourse-cdn.com/sailpoint/discuss/user_avatar/developer.sailpoint.com/aditya_pathak/32/2758_2.png) [@aditya\_pathak](https://developer.sailpoint.com/discuss/u/aditya_pathak)\
**Post date:** [July 18, 2023, 12:45am UTC](https://developer.sailpoint.com/discuss/t/csrf-validation-failed-installing-plugin/13920/4 "2023-07-18T00:45:15Z")

</div>

Usually, CSRF error would appear if you’re trying to access multiple IIQ pages using same credentials for example say when you open multiple IIQ browser tabs with same id. It should never show up when you open 1 IIQ tab for your id.The issue might be unrelated.

Im assuming you’re using a separate Plugin DB, are you reusing any IIQ credentials in the code somehow?

---

<div class="post-metadata">

**Author:** ![system](https://global.discourse-cdn.com/sailpoint/original/2X/f/f2136700ed5e3703e0b85e02f6be799dacca7735.png) [@system](https://developer.sailpoint.com/discuss/u/system)\
**Post date:** [September 16, 2023, 12:45am UTC](https://developer.sailpoint.com/discuss/t/csrf-validation-failed-installing-plugin/13920/5 "2023-09-16T00:45:51Z")

</div>

This topic was automatically closed 60 days after the last reply. New replies are no longer allowed.