Error: “Scripts in the URL string are not allowed. Specify a URL that does not contain JavaScript or VBScript code.” (4281645)

You may encounter the following error while configuring AR Web Interface:

“An error occurred during this operation. For details, see the error description below.

Scripts in the URL string are not allowed. Specify a URL that does not contain JavaScript or VBScript code.”

This is a defect (TF00170613). By default AR disables script protocols in the URL to ensure the maximum security of the WI sites as those can be maliciously targeted.

WORKAROUND

1) On the IIS host server(s), please navigate to:

7.4.x

C:\Program Files\One Identity\Active Roles\7.4\Web\Public

2) Open the ‘Web.config’ file;

3) Locate the <appSettings>  tag and under it please paste the following:

<add key="AllowScriptProtocolInURL" value="true"/>

4) Save the file and close it;

5) Perform an IISRESET so the new settings are loaded;

Once the you completed the configuration of WI, please make sure to set the step 3) key’s value to false and reset IIS to ensure the Product is fully secured again.

STATUS:

This will be fixed on a future release of the product. Please refer to this article for updates or contact support referencing the defect ID TF00425720.