When logging into the WebUI, in spite of supplying the correct username and password you could get sent back to an empty login box with the message "Your session has expired, please login".

There are three possible causes for this behaviour.

#1:  Expired Password

In v6.0 of Ideagen Internal Audit (Aura) there is a bug which shows this message instead of directing you to the password reset page when you try to login after your password has expired.  The workaround is to click "Forgotten your password?" in the dialog box, which will prompt you for your email address and then send you a password reset link in an email.  

This bug is fixed in versions 6.0.1.1 and 5.4.0.10.

#2: Using 'http' instead of 'https' in the address bar

In some versions of Ideagen Internal Audit (Aura), attempting to access the Web application by browsing to http://server.domain.com/pentanainstance/WebUI (instead of https://server.domain.com/pentanainstance/WebUI) will produce this message. 

In addition, the following appears in the WebService.log:

*****An exception occurred at 18 September 2020 11:28:21
Exception - Unable to find AUTH COOKIE - 'TngAuthentication' in request.
**************************************************
2020-18-18 11:28:21.621
*****An exception occurred at 18 September 2020 11:28:21
CookieException - One of the identified items was in an invalid format.
 at Pentana.Tng.ServiceInterface.TngWebService.GetWebUserByHttp() in c:\Projects\Pentana\Tng\4.2\Web\Service\TngWebService.svc.cs:line 1010
 at Pentana.Tng.ServiceInterface.TngWebService.GetSettings(String culture) in c:\Projects\Pentana\Tng\4.2\Web\Service\TngWebService.svc.cs:line 60
**************************************************

Ensure that you have https in the address bar, not just http.

#3:  Stray web.config file in the instance root

Normally the IIS folder containing the Ideagen Internal Audit (Aura) applications will not contain a web.config file.  In the event that one is present, this error may occur.  Further investigation of the requirement for this additional file would be needed - please contact Ideagen Support for assistance.