Session management in Info View with two different logins using single sign

Question

There is a form with 2 user logins UserA and User B to redirect to infoview with sso in my application. I am able to go to each of the Infoview pages successfully but have the following problem.
User A logs in and infoview opens in a new IE window and sees his/her folders based on permissions and is able to do his/her work for the first time.
User B logs in andand infoview opens in a new IE window sees his/her folders based on permissions and is able to do his/her work for the first time.
<b>After a while when User A tries to access the InfoView in the previously opened IE Window, he/she gets an error message. An error has occurred: The object with ID 2519 does not exist in the CMS or you don't have the right to access it.
User B is able to continue his/her work. Who ever logs in the last, he/she is able to continue his/her work but the other one gets an error.</b>
<b>Please let me know on how to address this issue . I added logonToken and tried everything at my hand but no success. Is this session controlled by business objects or by the jsp page. What more changes are required for my jsp page to fix the error. Attached below are the form and the applogon.jsp snippets.</b>
<B> applogon.jsp</B>
    IEnterpriseSession enterpriseSession = null;
    Exception failure = null;
    boolean loggedIn = true;
     String redirectURL = null;
     // If no session already exists, logon using the specified parameters.
    if (enterpriseSession == null){
        try{
            // Attempt logon. Create an Enterprise session manager object.
            ISessionMgr sm = CrystalEnterprise.getSessionMgr();
            // Log on to BusinessObjects Enterprise
            enterpriseSession = sm.logon(username, password, "cms", "secEnterprise");
        }catch (Exception error){
            loggedIn = false;
            failure = error;
        if (!loggedIn){
            // If the login failed, redirect the user to the start page.
            return;
        }else{
            // Store the IEnterpriseSession object in the session.
            session.setAttribute("EnterpriseSession", enterpriseSession);
            // Create the IInfoStore object.
            IInfoStore iStore = (IInfoStore) enterpriseSession.getService("InfoStore");
            // Store the IInfoStore object in the session using the helper functions.
            session.setAttribute("InfoStore", iStore);
            // Store the CMS name for later use.
            session.setAttribute("CMS", "CMS");
               // Create the IReportSourceFactory object.
               IReportAppFactory reportAppFactory =(IReportAppFactory)enterpriseSession.getService("RASReportService");
               // Store the IReportSourceFactory object in the session using the helper functions.
               session.setAttribute("ReportAppFactory", reportAppFactory);
            // Retrieve the logon token manager.
            ILogonTokenMgr logonTokenMgr = enterpriseSession.getLogonTokenMgr();
               String logonToken = logonTokenMgr.createLogonToken("", 60, 100);
               String infoViewURL = null;
               String tokenParam = null;
               infoViewURL = "/businessobjects/enterprise115/desktoplaunch/InfoView/logon/logon.do";
               tokenParam = "token=" + logonToken;
               redirectURL = infoViewURL + "?" + tokenParam;
            // Retrieve a logon token and store it in the user's cookie
            // file for use later.
            Cookie cookie = new Cookie("LogonToken", logonTokenMgr.createLogonToken("", 60, 100));
            response.addCookie(cookie);
            // Store the logon token for later use.
            session.setAttribute("token", enterpriseSession.getLogonTokenMgr().getDefaultToken());
     // Redirect the user to the relevant tutorial page.
     out.println("You have been logged on to Enterprise.");
     response.sendRedirect (redirectURL);
Thank You for your help

Answer 1

// Retrieve the parameters that the user entered into the logon fields.
<b> user name and password come from here from the above html form into the jsp here. Ted Is this what you are asking for where does the username and password come from
    String username = request.getParameter("user");
    String password = request.getParameter("pass");
</b>
    IEnterpriseSession enterpriseSession = null;
    Exception failure = null;
    boolean loggedIn = true;
     String redirectURL = null;
     ISessionMgr sessionMgr = null;
     // If no session already exists, logon using the specified parameters.
    if (enterpriseSession == null){
        try{
            // Attempt logon. Create an Enterprise session manager object.
            sessionMgr = CrystalEnterprise.getSessionMgr();
            // Log on to BusinessObjects Enterprise
            enterpriseSession = sessionMgr.logon(username, password, "appserver.abc.com", "secEnterprise");
               System.out.println("line61");
        }catch (Exception error){
            loggedIn = false;
            failure = error;
        if (!loggedIn){
            // If the login failed, redirect the user to the start page.
            return;
        }else{ this code is in my first post