401 error using Windows Authentication and SSL when accessing form reports in the workarea

  • Updated

You're suddenly seeing a 401 error while trying to access the form reports functionality in the workarea when using Windows Authentication and SSL. 

Error transforming XML with XSLT.

Error Message: An error occurred while loading document 'https://www.mydomain.com:443/WorkArea/controls/forms/FormReportsManifest.xml'. The remote server returned an error: (401) Unauthorized.

So why is this happening?

The server is not authorized to get a file from itself using https and a fully qualified URL including its domain name.

How can I fix it?

By default IIS has a loopback that you need to disable in order to use http://HOST.com (vs http://localhost). In order to disable the loopback refer to this Microsoft article: You receive error 401.1 when you browse a Web site that uses Integrated Authentication and is hosted on IIS 5.1 or IIS 6. Once you do this, the web server can authenticate to itself. 


An excerpt from the Microsoft article reads:

When you use the fully qualified domain name (FQDN) or a custom host header to browse a local Web site that is hosted on a computer that is running Microsoft Internet Information Services (IIS) 5.1 or IIS 6, you may receive an error message that resembles the following:

HTTP 401.1 - Unauthorized: Logon Failed

This issue occurs when the Web site uses Integrated Authentication and has a name that is mapped to the local loopback address.