Policy Xpress SOAP query using Basic Auth is not sending the Authorization header

book

Article ID: 184063

calendar_today

Updated On:

Products

CA Identity Manager CA Identity Suite

Issue/Introduction

A Policy Xpress SOAP query configured to use Basic Auth is not sending the Authorization header.  The same SOAP request sent via SoapUI does include the header.  CA API Gateway is being used to handle the request, which is going to SAP SuccessFactors web service.  When testing the PX action, the test fails and the error returned is "Policy Falsified".

Cause

IM is not sending the header because the API Gateway policy is not configured to require HTTP Basic Credentials.

Resolution

In the CA API Gateway policy, add an assertion "Require HTTP Basic Credentials".  Then the Authorization: Basic header will be sent.