Policy Server reporting SamlValidator (Pass 1)Caught unknown exception or error: java.lang.NullPointerException when consuming the assertion

Products

• SITEMINDER

Issue/Introduction

Policy Server reporting NullPointerException exception  when consuming  the assertion 

[SamlValidator.java][smAuthenticate]SamlValidator (Pass 1)Caught unknown exception or error: java.lang.NullPointerException - Stacktrace: java.lang.NullPointerException
 at com.netegrity.ps.auth.saml.Saml2Validator.smAuthenticate(Unknown Source)
 at com.netegrity.ps.auth.saml.SamlValidator.smAuthenticate(Unknown Source)

Environment

Release : 12.8.SP5 and 12.8 SP6 

Component : SITEMINDER FEDERATION END POINT

Resolution

Issue related to "Recipient"  URL within the assertion containing space Which is failing in URI check and continues to process rest of the elements in the assertion without processing NotOnOrAfter attribute
Down the line, the code trying to cast non existing object as date from map which is causing NullPointer Exception and resulting in failure.

][][SubjectConfirmation recipient = https://test.fed.com/affwebservices/public/saml2assertionconsumer/   AssertionConsumerServiceURL = https://test.fed.com/affwebservices/public/saml2assertionconsumer/][][][][][][][][][][][][][][][][][][]
[Saml2Validator.java][checkAssertion][SubjectConfirmation rejected - Malformed recipient or Assertion Consumer Service URI: java.net.URISyntaxException: Illegal character in path at index 76: https://test.fed.com/affwebservices/public/saml2assertionconsumer/ ][][][][][][][][][][][][][][][][][][]
[Saml2Validator.java][checkAssertion][Conditions notOnOrAfter (before skew): Sun Jan 30 13:13:27 EST 2022][]
 

Example of received recipient with space

<saml2:SubjectConfirmation Method="urn:oasis:names:tc:SAML:2.0:cm:bearer"><saml2:SubjectConfirmationData NotOnOrAfter="2022-01-30T18:13:27.478Z" Recipient="https://test.fed.com/affwebservices/public/saml2assertionconsumer/ "/></saml2:SubjectConfirmation>

To solve the issue , please make sure that IDP is configured properly and remove any space from the Recipient URI