2654552 - LMS URL shows "NOT SECURE" and shield icon(Load unsafe script) in chrome and similar issues in other browsers - [LMS]

1) User are getting a shield icon in the URL, which when opened tells "Load Unsafe Script"

2) Users are getting "Not Secure" in the browser as displayed below in chrome and in other browsers warning us about the connection.

SAP SuccessFactors Learning Management System

1) When we access the LMS system by launching a course as a user, we are getting a shield icon in the URL, which when opened tells "Load Unsafe Script" and/or

2) Users are getting "Not Secure" in the browser as displayed below in chrome and in other browsers warning us about the connection.

1) SuccessFactors LMS is a secure application and our certificates are up to date that is completely secure to access and would always have "Secure" text in the URL bar when opened in chrome (and no problems in other browsers), but when you access certain course(s), if you were given a popup (shield icon in chrome's URL bar-right corner, or in IE that says "Allow blocked content" that asks us to load unsafe script (in chrome) and "Show all content" option in IE.

2) If we agree, the course(s) will load after which the URL would show it as "Not Secure"(in chrome). The browser is doing this and not SuccessFactors.

3) The issue here is, the course might have some or all of the pages in a http location (and not https) and the handshake between the secure, https, SuccessFactors and not secure, http, the content location. (check the attached screenshot for your reference) causes this issue as shown below:

4) When this happens, the browsers observe the handshake and when/if we agree(in step number 2) then the entire URL will be marked as "NOT SECURE" which is expected and the browser is doing that here. Please note that, once this site is marked as "Not Secure" even if you are not using the course later, the URL would still be marked as "Not Secure" because your browser is tracking this. You need to clear all your cookies, cache, browsing history and wait for sometime for the website to be recognised as Secure again.

Solution : Please make sure to use only contents that are stored in a https location and not http and if you want/need to use from http, please ignore the message or the URL text that says "NOT SECURE" or simply modify the browser setting to ignore all such error message (google how to do it browser specific and you will get a lot of search results, but we do not recommend this as this will affect all the other URLs you visit which is not safe and we do not recommend it)

Not Secure, chrome content issue, shield icon, load unsafe script, Show all content, Allow blocked content, icontent security, lms not secure, connection not secure , KBA , LOD-SF-LMS , Learning Management System , LOD-SF-LMS-PCM , iContent , Problem