KB-1011 401 error thrown when attempting to access Appian after configuring a web server
Symptoms
When attempting to access Appian with a web server configured, users receive a 401 error like the one below:

The following error is seen in the application server log:
ERROR com.appiancorp.security.cors.CorsFilter - CORS request rejected; invalid request from <SOURCE_IP_ADDRESS> to <URL>
javax.servlet.ServletException: CORS origin denied: <URL> is not on the allowed list:[] or the request path does not match the allowed paths.
Additionally, users who can login may be unable to load or open objects in /design.
Cause
There is a misconfiguration in custom.properties related to the site URL.
Action
- Ensure the
conf.suite.SCHEMEproperty in custom.properties matches the appropriate scheme users are using to access the site. I.e., HTTPS if SSL is configured on the web server and HTTP if it is not. - Ensure the
conf.suite.SERVER_AND_PORTproperty in custom.properties matches the computer’s hostname and includes a port only if the default port is not being used, which is 80 for HTTP and 443 for HTTPS. These default ports are assumed based on the value ofconf.suite.SCHEME.
Affected Versions
This article applies to all self-managed versions of Appian using a web server.
Last Reviewed: January 2022
