What causes this error?
- Harry starts a test in his History of Magic course in Blackboard.
- Next, he opens a new tab or window in the same browser and navigates to the myUMBC portal to access Blackboard
- By accessing Blackboard again through myUMBC, Harry has starts a completely new session, which kills the existing session.
- When Harry completes the test, he will get an error message:
Either you are not logged in or you do not have the appropriate privileges to perform this action.
You may have access to other parts of the course.
- If Harry clicks cancel, he can get back to the test to start over. If he clicks Log In, he has to request a test reset. Either way, all test answers are lost
What does this mean?
Blackboard logs the second log-in attempt as:
Invalid cross-site request forgery nonce for request authenticity and exception thrown. May be an indicator of a cross-site request forgery attack.
Essentially, Blackboard knows Harry has already logged in to the system. By going through myUMBC again to log in, Harry is requesting a new session to "start over" in Blackboard, which tells the system to disconnect Harry from everything he is currently doing, including taking a test.
RECOMMENDATIONS FOR STUDENTS
Please do not open a new tab or browser window when taking a test in Blackboard. You will be disconnected.