Identity Governance (IG) Connector fails with OpenID enabled in Identity Analytics (IP) 14.4.1: LoginException

Products

• CA Identity Suite
• CA Identity Portal
• CA Identity Governance

Issue/Introduction

Following a recent upgrade to CA Identity Portal (IP) 14.4.1 CP1, we are encountering an authentication failure with the Identity Governance (IG) connector. This issue occurs specifically when OpenID Connect (OIDC) is enabled for single sign-on.

Based on the logs, the portal appears to pass a null attribute instead of the actual user identifier during the backend lookup.

Log Snippet:

text

2022-01-21 10:49:00,395 ERROR [com.idmlogic.sigma.connector.ca.gm.v2.GmAdapter] (default task-92) User does not exist in the backend System with the attribute null and User_ID 
2022-01-21 10:49:00,395 INFO  [com.idmlogic.sigma.manager.impl.SigmaLoginManagerBean] (default task-92) user with login Id:  failed to login to connector with Id: 7477: javax.security.auth.login.LoginException: User does not exist in the backend system

Environment

Release : 14.4.1

Component : SIGMA-Identity Suite

Resolution

This issue has been resolved, and the fix is included in CA Identity Suite 14.4 Cumulative Release 2.