search cancel

Reason and resolution for error "Configured auth landling url does not match auth url in token"

book

Article ID: 240569

calendar_today

Updated On:

Products

CA Strong Authentication

Issue/Introduction

Reason and resolution for error "Configured auth landling url does not match auth url in token".

Cause

Mismatch in AFM landing URL parameter provided in the configuration file adaptershmim.ini and that provided in the configuration file arcotafm.properties leads to this error. The error is expected in the scenario where one might have a Proxy or Load Balancer between Siteminder Server and the AFM Server.

Environment

Release : All AA releases 

Component : AuthMinder(Arcot WebFort)

Resolution

To resolve this issue, please copy the matching AFM landing URL (as in the adaptershim.ini file) into the arcotafm.properties file updating the  parameter ArcotAFMLandingURL and restarting the AFM that is, please uncomment the  #ArcotAFMLandingURL= parameter by removing the "#" and then populate the URL.

Note that configuration wise the parameter ArcotAFMLandingURL (AFM Landing URL) is configurable in these two listed configuration files below

1. arcotafm.properties 

2. adaptershim.ini

1. arcotafm.properties

# --------------------------------------------------------------------------
#  ArcotAFMLandingURL is used by Arcot Shim (or other component
#  which redirects to the arcotafm controller) to verify that the user
#  was processed with the redirected URL. Optional setting, required
#  only if the application server does not map URL to the same value as the
#  Arcot Shim used for redirection.
#
#  Defaults to controller JSP that receives HTTPRequest.

#
# --------------------------------------------------------------------------

#ArcotAFMLandingURL=                                 ***** Commented out here  *******

2. Adaptershim.ini (example adaptershim.ini showing a specific One-Page login scenario)

#
# One-Page login scenario
#

DisambigSchemeLib=
DisambigSchemeParam=
AuthSchemeLib=
AuthSchemeParam=

ArcotSMBaseURL=http://10.xx.4xx.xx:xxxx/arcotsm/servlet
ArcotSMRetries=0
ArcotSMResponseWait=5
ArcotSMTrustedRootPEM=ARCOT_HOME/adapterSiteMinder/certs/rootcacert.pem
ArcotSMClientSSLCert=ARCOT_HOME/adapterSiteMinder/certs/tsclientcert.pem
ArcotSMClientPrivateKey=ARCOT_HOME/adapterSiteMinder/certs/tsclientkey.pem

ArcotAFMLandingURL=https://10.xx.xx.xxx:8443/arcotafm/master.jsp?profile=siteminderprofile

Additional Information

None.