Has anyone encountered issues with portal users suddenly being asked to login again to the customer portal when accessing Visualforce resources? Any ideas what could be done to fix it?


We have a customer portal with some helper buttons that are implemented in Visualforce and then displayed to the user via an iframe in a custom sidebar component. For some users, using the buttons in the sidebar component takes them back to the login page. Based on the startURL param from the login page the referring page was /visualforce/session?url=https%3A%2F%2Fc.na1.visual.force.com%2Fapex%2FMyVfPage.

It would appear the sequence is

  1. Login to the Portal land on home page


  2. Click Over to a Visualforce Page


  3. Get redirected to /visualforce/session


  4. Kicked out to login page


  • Does the button within the iframe target the _top or _parent window when the click occurs or does the behavior stay within the frame?
    – Mark Pond
    Commented Jul 15, 2013 at 17:29
  • the target is _top Commented Jul 15, 2013 at 23:34

2 Answers 2


And the answer was!!

Internet Explore security settings.

Turns out the particular user had some fairly restrictive security settings for untrusted sites. They had whitelisted *.salesforce.com but not *.force.com. Add *.force.com to their list of trusted sites fixed the issue.


As far as I know, cookies are managed per domain. Since na1.salesforce.com and c.na1.visual.force.com are two different domain, this may be the reason why the user has to login twice (two domains, two cookies).

If you give additional details about how your Visualforce pages are setup, I might be able to pinpoint the source :)!

  • Anything in particular that would be helpful? Not sure what additional details might help Commented Jul 15, 2013 at 23:35

You must log in to answer this question.

Not the answer you're looking for? Browse other questions tagged .