Support Request: Chrome Bankid issue

Reproduction

With BankID app installed, in Chrome engine, navigate to "https://secure.handelsbanken.se/logon/se/priv/sv/", press first button and SK error screen shows "ERR_UNKNOWN_URL_SCHEME".

Description

Hello,
so we recently upgraded our SK configs to a Chrome engine and noticed one issue.
On the machines we have installed BankID application which identifies customers for Swedish banks via request from browsers like "bankid:///?autostarttoken=c586f6bc-3680-4204-a1b3-c6990c3cb55b&redirect=null"
It can be downloaded from here "https://www.handelsbanken.se/sv/privat/digitala-tjanster/installera-bankid".

if we use clean config with IE/Edge engine, navigate to "https://secure.handelsbanken.se/logon/se/priv/sv/", press the first option, the BankID app loads and identifies user successfully.
The issue is when we use clean config Chrome engine - via same procedure, it shows err.png.
When we do the same in standalone Chrome app, we get this popup "normal_chrome.png", but once we click OK the page loads as it should.

I have tried whitelisting the BankID app in config, played with the Chrome options aswell as allowing all schemes by default in config with no luck.
Domain/SKLocal user is the same.

Is this a bug in SK/Chrome engine? Or can this be fixed in the config somehow?

Thanks,

Answer: (7)

Re: Chrome Bankid issue 5/4/2020 9:23 AM
Hello,

As the error message appplies to an unnknown URL scheme this may still applies to the bankid: protocoll and the application you configured for this protocol.

(As SiteKiosk is a secure browser it will not allow all protocols by default - SiteKiosk only allows certain protocols / schemes by default).
You first should allow that protocol by editing the SiteKiosk configuration file (…\SiteKiosk\Config\YourConfig.skcfg) e.g. with Notepad.
Search for the line:

<schemes defaultallowed="false">

Below that line you can add the required protocol with adding a line like this:

<scheme name="bankid" desc="bankid protocol" allowed="true"/>

- On Windows versions with UAC activated (8/10) start the editor you use to change the SKCFG settings as Administrator (Run as Administrator) to be sure that you can save the changes (because of UAC).


Then you should make sure that the default application you want to open with this protocol is configured in Windows (Control Panel-->Default Programs->Associate a file type or protocol with a program)
Make sure it is not a Windows 10 / 8 (Modern UI) App and first test in “Start once” mode as these settings on Windows may user dependent.
If it works in “Start once” (in the user account where you also checked outside of SiteKiosk) you should check the protocol setting on Windows (assigned application) in the user account you run SiteKiosk later on.
For the SiteKiosk user account please find here the information about how getting access:

Otherwise it may applies to the additional PNG popup that displays when using Chrome?

Browser Engine:
SiteKiosk 9.7.5232 uses Chromium 76.0.3809.132 Windows 32 Bit for the Chrome Browser Skin.
Here you can find the corresponding Chromium test application for download (unzip 2x and run the cefclient.exe in the "Release" folder) which is currently used in SiteKiosk 9.7.5232 (Chromium 76.0.3809.132 Windows 32 Bit):
http://opensource.spotify.com/cefbuilds/cef_binary_76.1.13%2Bgf19c584%2Bchromium-76.0.3809.132_windows32_client.tar.bz2




Regards,
Michael Olbrich
Re: Chrome Bankid issue 5/4/2020 9:44 AM
Hi,
thanks for the fast reply

I edited the config as you said, but that did not fixed the issue, same SK SCHEME_ERR showed up.

When I did the same procedure on the chrome test app you posted, it showed this:
http://imgbox.com/gtbUnGJo

So is there a way to fix it?

Thanks
Re: Chrome Bankid issue 5/4/2020 10:05 AM
Hello,

As a far as I can see the Chromium CEF application shows the same error like in SiteKiosk
>ERR_UNKNOWN_URL_SCHEME

I assume that means that there is no application configured with the protocol (URL scheme) that is used here.

Did you configure an application on Windows for the bankid protocol?
If yes, which one?
Does it work to open the app when using Chrome (Chromium CEF) in the Admin account?
Or did you install any kind of plugin to Chrome to make it work?

Regards,
Michael Olbrich
Re: Chrome Bankid issue 5/4/2020 11:55 AM
Hi,
yeah, the default program for BankID is set by default by the BankID app after installation, see:
http://imgbox.com/rBJ08XNr
http://imgbox.com/kQTeBJlI

I don't think that's the issue, as it does not show any error when trying in Chrome, IE, Edge.
Tried also adding the site to Trusted sites, no help.

When opening as admin in CEF, same issue, ERR_UNKNOWN_URL_SCHEME.
Tried also in latest versions of CEF, both x86 and x64, same issue.

No Chrome plugin was installed, or any additional app beside the BankID, as I am using clean VM for this troubleshooting.

If the SK uses the CFE version of Chrome, to me it looks like the CFE version handles the protocol schemes differently as the other browsers, or maybe it is somehow more restrictive?
Re: Chrome Bankid issue 5/4/2020 12:06 PM
Hello,

Can you send a screenshot from the setting for this protocol at “-->Control Panel-->Default Programs->Associate a file type or protocol with a program”?

Did you start SiteKiosk in “Start once” mode in the same account where it worked with the other browser applications?

Regards,
Michael Olbrich
Pages (2): [1] 2 Next »
My Account
Login
Language (Tickets):