Conductor Login error: "Your change was rejected" (v2.2.8 and earlier)

You may get this error if you log in to the Conductor from a different tab, or if your session has expired and you try to log in again.

Workaround

Refresh the page, or on the page URL, clear everything but the Conductor URL and press Enter.

For example: https://conductor.mydomain.com/

Both of these methods resets the token (see below) and allows you to log in.

Cause

This issue is caused by a feature in browsers intended to prevent cross-site attacks (called the cross-site request forgery (CSRF) Token – see https://www.owasp.org/index.php/Cross-Site_Request_Forgery_(CSRF)).