Identity Manager Environment Deployment Fails with Agent Not Found Error - Identity Manager
Article ID: 199894
Updated On:
Products
Issue/Introduction
While integrating Identity Manager with SiteMinder and following steps in the documentation below
Integrate CA Single Sign-on with CA Identity Manager
at step Disable the Native CA Identity Manager Framework Authentication Filter, the User Store and Provisioning Store are created automatically but not the Environment. IM won't start. We are getting the following exceptions
2020-09-21 13:58:04,597 INFO [ims.Main] (MSC service thread 1-4) * Deploying Directory : UserStore
2020-09-21 13:58:26,838 INFO [ims.Main] (MSC service thread 1-4) * Deploying Directory : ProvStore
2020-09-21 13:58:45,607 INFO [ims.Main] (MSC service thread 1-4) * Deploying Environment : identityEnv
2020-09-21 13:58:45,940 ERROR [ims.tmt.EnvironmentService] (MSC service thread 1-4) Deploying environment environment.xml: com.netegrity.imsconfig.exception.ImsConfigException: The agent "<imuser_id>" could not be found on the SiteMinder policy server
at com.netegrity.imsconfig.utils.PolicyServerObjects.getAgentOrAgentGroup(PolicyServerObjects.java:690) [imsconfig.jar:]
at ...
Environment
Identity Manager 14.4 when installed with OOTB IM Environment (Out-of-the-box IME).
Siteminder 12.8
Cause
This issue happens when Identity Manager is installed with OOTB IM Environment (Out-of-the-box IME). SampleEnvironment.properties file under <Application Server's deployment directory>\iam_im.ear\user_console.war\META-INF directory was not corrected before the Application Server restart:
@IMEAgent : this parameter value should be the Web Proxy Server's SSO Web Agent name
@baseurl : this parameter value should be the Web Proxy Server's URL that redirects to IM
Resolution
Modify parameters @IMEAgent and @baseurl in SampleEnvironment.properties file under <Application Server's deployment directory>\iam_im.ear\user_console.war\META-INF directory to have correct values and the restart the Application Server again.
e.g.
You build Web Proxy Server for this integration utilizing Symantec Access Gateway (SPS). You configure the SSO Web Agent installed in the SPS machine as sps_agent. You also configure the SPS redirection from http://<sps fqhn>/iam/im/identityEnv to http://<im fqhn>:8080/iam/im/identityEnv. In this situation, the above parameter settings become:
@IMEAgent=sps_agent
@baseurl=http://<sps fqhn>/iam/im
Additional Information
Feedback
