Ironport Basic Authentication Token

[shane.clark2]

We're a having an issue where our doctors are in a group where we allow streaming video, but the PA group is not allowed.

If the PA is logged in to the device, logs out, then the doctor logs in, they are not able to get to streaming video, and the deny message has the PA's credentials.

From what we've found, we believe this to be related to the "Basic Authentication Token TTL", which we have set at 3600 seconds.

Is there a way to force the ironport to get the new credentials when someone new logs in to the device?

[Tom Foucha · Accepted solution]

You may want to try using Session Cookie surrogates and see if this resolves your issue. If you have many users sharing the workstation in a short time period and you are using IP surrogates it will keep the auth token based on the machines IP address not the user logged in.