You may see the following after opening a Banner Admin Common page through Application Navigator:
Authentication Failed
Problem in external authentication service.
Other variations of this error that we've seen in the past include:
Service Invocation Failed
Couldn't access remote service
Session Initialization Failed
Couldn't access remote service
Regardless of the error, your browser is probably blocking third-party cookies in some way.
Likely Suspects
Ad-Blocker
- Try disabling any ad-blocker extension you might have installed
- Refresh the page (Application Navigator)
- Test if the Banner page will load this time
- If it loads, your ad-blocker is the problem
- Either leave it disabled, or configure it to add the following exceptions:
Other Extensions
If you aren't using an ad-blocker, or you've determined it wasn't the ad-blocker
- Disable all other extensions (this is the fastest way to know if it was one of your extensions)
- Refresh the page (Application Navigator)
- Test if the Banner page will load this time
- If it still doesn't load after disabling all extensions, it wasn't one of your extensions
- If it does load, it was one of your extensions, proceed to the next step
- Re-enable your extensions one at a time, repeating steps 2 and 3 for each one until the page no longer loads
- Whatever extension you last enabled is likely the problem
- Consider uninstalling it, leaving it disabled, or re-configuring it somehow to ignore banner.utahtech.edu
Browser Settings
Modern browsers are often adding new security and privacy protections that may negatively interact with Banner authentication--usually by blocking third-party cookies
Enhanced Tracking Protection
Depending on your browser, there may be some form of "tracking protection" enabled. If you wish to keep this on for privacy benefits, see if there is some way to add an exception for banner.utahtech.edu
Blocking All Third-Party Cookies
Many browsers include an option to block all third-party cookies. Banner authentication relies on a third-party cookie to function, so you will need to turn this feature off or add banner.utahtech.edu and login.microsoftonline.com as an allowed exception.
Microsoft Seamless Autologin (Windows devices only)
University owned devices running Windows will be tied to the university domain, which enables a feature to automatically sign you into all our Microsoft related products (including our SSO authentication solution, Azure).
We've seen some strange behaviour on some individual's PCs that cause Banner Admin Common to fail to authenticate every other time. This has something to do with how Azure handles the autologin through an X-Frame. Banner is also using an X-Frame, so the double X-Frame is causing browser security to deny the cookies from Azure.
There are a few workarounds for this, but no true solution yet:
- Log out of Banner and in again whenever it occurs.
- Use a private browsing window (aka incognito), which will bypass the autologin feature (be sure third-party cookies are being allowed for private windows, or you will still get the same error).
- Use a different browser. We've seen instances where only one browser was affected, so you may be able to get by using an alternative browser for Banner.
- Contact IT and they can work with you to remove the seamless autologin feature from your computer.