Dear Customer/Partner,

As you are, according to our knowledge, potentially using the Android version of the QMC (Quintiq Mobile Client) we want to inform you of an upcoming change in the QMC for Android, which requires urgent action. If you are using the Quintiq Application Suite via DHS (DELMIA Hosted Solutions) or if you are using the iOS version of the QMC, then there is no need for action on your side.

Short story

The next revision of the Android version of the QMC will require an update on the server side configuration to enable ‘SameSite’ attribute in Cookies. A change required in Android apps by Google will result in SAML NOT WORKING for Android QMC. There are two available solutions:

• Use a web server proxy (preferred). Configuration changes to the reverse proxy between the QMC and Quintiq, the guide may be found here
• Use SameSite compatible Quintiq software: Upcoming Quintiq patches that will resolve this issue: 2023 (6.4) Refresh2 and 2022 (6.3) Refresh6

Long story

In order to support Android 12, we are required to update the core part of QMC. As a result of this updated part, the QMC from now on requires cookies to include the ‘SameSite’ attribute in HTTP APIs. In order to cater for this, the latest versions of the Quintiq software (2023 (6.4) Refresh2 and 2022 (6.3) Refresh6) now support the ‘SameSite’ Cookie attribute for the Quintiq Mobility Engine.

We also want to point you to an alternative way of implementing ‘SameSite’ Cookie attribute support. In this way there will be the need for configuration changes in a reverse proxy between the Quintiq Mobility Engine and the QMC. This is required for all versions older than 2023 (6.4) Refresh2 and 2022 (6.3) Refresh6, but it is also preferred for later versions to benefit from other security features of a standard web server not offered by the Quintiq software.

In link, we describe the way to set this up using IIS and Apache. Of course it is also possible to use a different webserver to take care of ‘SameSite’ support. If you are using DHS as your hosting partner then there is no need to do anything as DHS will update their configuration to support ‘SameSite’ Cookie attribute.

You can already start to update the reverse proxy in your setup as the ‘SameSite’ changes will not influence the current QMC. We will soon make a new beta version available via Apple TestFlight and Android Beta, scheduled to open on July 28, 2023 and it will run until September 15, 2023. This can be used to test your setup and provide us with feedback in case of any issues. After September 15, 2023, the new version will be validated by Apple and Google and will become available in the respective app stores.

Any questions?

In case you have any questions please contact DELMIA Quintiq Support as usual.