diff --git a/workflow/engine/methods/steps/steps_Ajax.php b/workflow/engine/methods/steps/steps_Ajax.php
index 2a4c457b9..5e7ac29b9 100755
--- a/workflow/engine/methods/steps/steps_Ajax.php
+++ b/workflow/engine/methods/steps/steps_Ajax.php
@@ -21,6 +21,11 @@
  * For more information, contact Colosa Inc, 2566 Le Jeune Rd.,
  * Coral Gables, FL, 33134, USA, or email info@colosa.com.
  */
+if (!isset($_SESSION['USER_LOGGED'])) {
+    G::SendTemporalMessage('ID_LOGIN_AGAIN', 'warning', 'labels');
+    die('<script type="text/javascript">parent.location = "../login/login";</script>');
+}
+
 try {
     global $RBAC;
     switch ($RBAC->userCanAccess( 'PM_FACTORY' )) {
diff --git a/workflow/public_html/sysGeneric.php b/workflow/public_html/sysGeneric.php
index 81a4b4f11..71078dd6c 100755
--- a/workflow/public_html/sysGeneric.php
+++ b/workflow/public_html/sysGeneric.php
@@ -773,6 +773,7 @@ if (! defined( 'EXECUTE_BY_CRON' )) {
         $noLoginFiles[] = 'dynaforms_checkDependentFields';
         $noLoginFiles[] = 'fields_Ajax';
         $noLoginFiles[] = 'appFolderAjax';
+        $noLoginFiles[] = 'steps_Ajax';
 
         $noLoginFolders[] = 'services';
         $noLoginFolders[] = 'tracker';