You log into Chase Online Banking, successfully view your Sapphire Preferred, Sapphire Reserve, or Freedom card balance, and click on your Ultimate Rewards points balance to book a flight, transfer points to Hyatt or United, or redeem cash back.
Instead of opening the travel portal, your screen flickers, redirects through several URLs, and dumps you right back at the Chase login screen, asking for your username and password again.
You log in again, click Ultimate Rewards, and the exact same thing happens. You are trapped in the Chase Ultimate Rewards Single Sign-On (SSO) login loop.
In this guide, we walk through basic troubleshooting first aid, explain the technical mechanics of cross-domain authentication tokens, and provide verified solutions to break the redirect loop across desktop and mobile.
1. Basic Troubleshooting First Aid (Do These First)
Before deleting all browser data, execute these five fast diagnostic checks to isolate the login loop:
| First-Aid Action | Diagnostic Objective | Execution Pathway |
|---|---|---|
| Use Incognito / Private Window | Bypasses conflicting legacy session cookies | Chrome: Ctrl+Shift+N (Windows) / Cmd+Shift+N (Mac). Safari: File > New Private Window. |
| Try the Chase Mobile App | Tests whether the issue is browser-specific | Open the Chase app > Tap your card > Tap Ultimate Rewards point balance. |
| Switch Desktop Browsers | Eliminates browser engine token handling bugs | If looping on Chrome, test on Firefox, Safari, or Microsoft Edge. |
| Check Travel Portal Outages | Verifies if cxLoyalty (Chase's travel provider) is down | Check social channels or travel forums for active booking engine maintenance. |
| Temporarily Disable VPN | Prevents IP mismatch between Chase and cxLoyalty | Pause VPN or private proxy services before launching the rewards portal. |
2. Technical Culprit: The Cross-Domain SSO Token Collision
The Chase Ultimate Rewards travel and redemption portal is not hosted on chase.com. It is operated on a dedicated white-label platform managed in partnership with cxLoyalty on a distinct server infrastructure (ultimaterewardspoints.chase.com).
[chase.com (Primary Auth)] ──► [Issues JWT / SAML Token]
│
▼
[ultimaterewardspoints.chase.com]
│
[Browser Drops Cross-Domain Cookie!]
│
▼
[Handshake Fails -> Redirect to Login]
When you click "Ultimate Rewards" on your account dashboard:
- Chase’s primary server generates an encrypted Security Assertion Markup Language (SAML) or JSON Web Token (JWT) token containing your identity credentials.
- The browser attempts to transmit this token across domains to the rewards sub-host.
- If your browser blocks third-party cookies, if you have privacy extensions active, or if your stored cookie jar contains an expired token from a session two weeks ago, the handshake aborts.
- The rewards server detects an unauthenticated request and automatically redirects you back to the root login portal, creating the infinite loop.
3. Step-by-Step Fixes to Break the Loop
Fix 1: Clear Specific Chase & Ultimate Rewards Cookies
Rather than deleting your entire internet history and losing passwords for other websites, delete only the cookies causing the conflict:
In Google Chrome:
- Navigate to
chrome://settings/content/allin your address bar. - In the search box in the upper right, type
chase. - Click Delete all shown.
- Repeat the search for
ultimaterewardsand delete any matching entries. - Close and relaunch Chrome.
In Safari (Mac):
- Open Safari > Settings > Privacy > Manage Website Data.
- Search for
chaseand click Remove All. - Relaunch Safari.
Fix 2: Disable Enhanced Tracking Protection in Firefox
Firefox’s Strict Tracking Protection is notoriously aggressive at dropping SAML tokens:
- On the Chase login screen, look to the left of the address bar and click the Shield Icon.
- Toggle the switch to turn Enhanced Tracking Protection OFF for this site.
- Reload the page and attempt opening Ultimate Rewards again.
💡 Related Chase Bank Solution: Encountering related issues? Check our verified fix for Chase Secure Message Center Not Loading or Blank Screen: Complete Fix Guide.
Frequently Asked Questions
Can I book Chase travel over the phone if the portal loops?
Yes! If you need to secure a flight or hotel reservation immediately and the website is stuck in a loop, call the Chase Ultimate Rewards Travel Desk directly at 1-855-234-2542 (or the number on the back of your Sapphire card). Representatives have direct terminal access to book flights at the same 1.25x or 1.5x points valuation without charging telephone booking fees.
Will points transferred to airlines or hotels expire if the portal loops?
No. Your Ultimate Rewards points never expire as long as your credit card account remains open and in good standing. Even during a technical portal glitch, your points balance remains completely safe on Chase’s central general ledger.