Hi there, would you call this a Feature or a bug?

It seems like there is something odd with the cancel-button on the /sspr/public/forgottenpassword page. It behaves the same as the search button (also returns error message username not found...)

What I would expect is to return to the SSPR Login page instead (so cancel the Feature call of forgotten Password because it just came back into my mind...)
Instead, a user has to retype the SSPR URL to get back to the Login page.


The html source says:

<button type="submit" name="button" class="btn" id="button-cancelButton" form="form-cancelButton">
<span class="btn-icon pwm-icon pwm-icon-times"></span>Cancel</button>

<form id="form-cancelButton" action="/sspr/public/forgottenpassword" method="post">
<input type="hidden" name="processAction" value="reset"/>
<input type="hidden" name="pwmFormID" value="lots of characters I'm not sure if they expose my Environment..."/>
</form>


The Action is defined in /opt/netiq/idm/apps/tomcat/webapps/sspr/WEB-INF/jsp/forgottenpassword-search.jsp with pwm:current-URL

Personally I'm not a friend of changing the jsp files due to Support reasons and hassles with updates.

How did you solve the issue or can you deal with the behavior?

Steffen