Error : Session AUTHDIROID null when SDK produces SMSESSION

Products

• SITEMINDER
• CA Single Sign On Federation (SiteMinder)
• CA Single Sign On Secure Proxy Server (SiteMinder)

Issue/Introduction

 

When running a Custom SDK Agent, this one produces a SMSESSION cookie without the attribute 151 AuthDirOID. This prevents applications protected on CA Access Gateway (SPS) to get all attributes in the OIDC journey.    

CA Access Gateway (SPS) Federation Services reports an error:

  [Session AUTHDIROID null] 
  [authDirOid is invalid!]

Environment

 

SDK 12.8SP5 on Windows 2019

 

Resolution

 

Upgrade SDK to 12.8SP6 to fix this issue (1).

 

Additional Information

 

(1)

    Defects Fixed in 12.8.06

      SDK

      | Wolken Case Number           | Internal Defect ID | Issue Description                  |
      |------------------------------+--------------------+------------------------------------|
      | 32544037, 32762622, 32513265 | DE496831           | When a SiteMinder SDK-             |
      |                              |                    | generated session token is         |
      |                              |                    | provided to SiteMinder OIDC        |
      |                              |                    | Provider, the generated user       |
      |                              |                    | claims contain only the sub claim. |