Users may be unable to log in to their Salesforce Production or Sandbox environment even when the login credentials entered are correct. What happens is they log in as usual then the page loops to a blank page. The issue doesn't get resolved even if the password has been reset or if the user uses a different browser. Also, when checking the login history, it will show that the affected user has successfully logged in.
The following are examples of redirect URLs the affected user may see in their browser:
https://xx.salesforce.com/content/recsession
https://xx.salesforce.com/visualforce/recsession
If users are redirected to a blank page after a successful login, the cause is typically the 'Lock sessions to the IP address' session setting. This Enabling this can cause the type of content/session - content/recession loops seen in the HAR file gathered leading to too many redirect errors when the customer's login IP does not match the remote address IP in the request.
To resolve the issue, you will need to uncheck the Lock sessions to the IP address from which they originated checkbox from Session Setting.
The setting 'Lock sessions to the IP address from which they originated' is only available in Enterprise, Performance, Unlimited and Developer Editions organizations. If your organization is not among these, then you will not have access to this setting.
Please note that this setting does not affect logging into mobile. If you need a quick workaround, the user may log in via a mobile device.
'Lock sessions to the IP address from which they originated' is not visible in Session Settings
000390864

We use three kinds of cookies on our websites: required, functional, and advertising. You can choose whether functional and advertising cookies apply. Click on the different cookie categories to find out more about each category and to change the default settings.
Privacy Statement
Required cookies are necessary for basic website functionality. Some examples include: session cookies needed to transmit the website, authentication cookies, and security cookies.
Functional cookies enhance functions, performance, and services on the website. Some examples include: cookies used to analyze site traffic, cookies used for market research, and cookies used to display advertising that is not directed to a particular individual.
Advertising cookies track activity across websites in order to understand a viewer’s interests, and direct them specific marketing. Some examples include: cookies used for remarketing, or interest-based advertising.