I have a single user that is trying to access Appian and is pulling up a blank p

I can't answer that part on a query string, but have you tried Fiddler or Wireshark to make sure your users are authenticating correctly?

Ok tried Fiddler, states I have a bad request (400 error) which makes me think perhaps it is expecting some sort of querystring parameters? I know of one user it works, and it don't for me, but I am not a member of any app group so though perhaps expected behavior.

I trying to remember what to do for that, but what happens if you go to designer/suite? I am guessing you are a developer or sys admin.

I would check to make sure the authentication settings are set correctly. I would look for the TLS settings I believe on the advanced tab to make sure all authentication methods match what what is setup for SSO.

Well sort of Sys admin, I work on the installation, then give that to our engineers to put in production, but my access in the application is limited to not see apps, we have a designer creating the apps inside Appian.

I will check the TLS settings, should it somehow match in the xml files?

If you have a keytab file or on a Windows server it is the authentication methods set to create your keytab or what is in the krb5.ini file. I would check all settings.

More I think about it, the is a query string but it is the user authentication response back first before you get to a page in Appian. It's hard for me to show that since I'm not a computer.

Hmm ok so that is on the Appian server correct. Yeah suite/designer I get the same error.

I am going to check my TLS settings, then compare to those it works, see if they are same or different. If different I can ask our help desk to change for me and see if I can get up and running.

I saw one user get into suite/apps and it just worked, so probably not query string :)

Yes, on the server.

For the security settings, check more than the TLS settings. All I could remember was that section since I'm on my iPad and not at my desk at work.

Checking mine vs others that work, they are the same on the IE 8 side.

Going to check the krb5.ini file, see if it was changed recently in produciton, and try the checkengine-u. Should I try to login using SSO, then run that and see if I am a missing user?

It won't matter either way. I would check the login.csv to see if you are showing that you are attempting to login.

I would check all Javascript settings and validate Java is setup correctly on your machine. Beyond this, I would check to see what has been installed so far patch wise on these computers.

Is that the login-audit.csv in the logs directory?