SAML authentication is broken in AE v21

Products

• CA Automic Workload Automation - Automation Engine

Issue/Introduction

SAML authentication is not working in Automation Engine versions 21.0.2 and 21.0.3.

Example of a RAW request in the previous versions:

SAMLRequest=BB94bWwgdmVyc2lvbj0iMS4wIiBlbmNvZDGTSTFRGSRFTGSRFHBSFGHBDFHNsMnA6TmFtZUlEUG9saWN5IEFsbG93Q3JlYXRlPSJmYWxzZSIgRm9ybWF0PSJ1cm46b2FzaXM6bmFtZXM6dGM6U0FNTDoxLjE6bmFtZWlkLWZvcm1hdDp1bnNwZWNpZmllZCIvPjxzYW1sMnA6UmVxdWVzdGVkQXV0aG5Db250ZXh0IENvbXBhcmlzb249Im1pbmltdW0iPjxzYW1sMjpBdXRobkNvbnRleHRDbGFzc1JlZiB4bWxuczpzYW1sMj0idXJuOm9hc2lzOm5hbWVzOnRjOlNBTUw6Mi4wOmFzc2VydGlvbiI%2BdXJuOm9hc2lzOm5hbWVzOnRjOlNBTUw6Mi4wOmFjOmNsYXNzZXM6UGFzc3dvcmQ8L3NhbWwyOkF1dGhuQ29udGV4dENsYXNzUmVmPjwvc2FtbDJwOlJlcXVlc3RlZEF1dGhuQ29udGV4dD48L3NhbWwycDpBdXRoblJlcXVlc3Q%2B&RelayState=AWAP%3A1000%3AONID

In 21.0.3 and 21.0.2, the following raw request is present:

BBHBFGHGFHNDXHM6Ly9hd2FkZXYuaXNhZG0ub3JlZ29uc3RhdGUuZWR1PC9zYW1sMjpJc3N1ZXI%2BPHNhbWwycDpOYW1lSURQb2xpY3kgQWxsb3dDcmVhdGU9ImZhbHNlIiBGb3JtYXQ9InVybjpvYXNpczpuYW1lczp0YzpTQU1MOjEuMTpuYW1laWQtZm9ybWF0OnVuc3BlY2lmaWVkIi8%2BPHNhbWwycDpSZXF1ZXN0ZWRBdXRobkNvbnRleHQgQ29tcGFyaXNvbj0ibWluaW11bSI%2BPHNhbWwyOkF1dGhuQ29udGV4dENsYXNzUmVmIHhtbG5zOnNhbWwyPSJ1cm46b2FzaXM6bmFtZXM6dGM6U0FNTDoyLjA6YXNzZXJ0aW9uIj51cm46b2FzaXM6bmFtZXM6dGM6U0FNTDoyLjA6YWM6Y2xhc3NlczpQYXNzd29yZDwvc2FtbDI6QXV0aG5Db250ZXh0Q2xhc3NSZWY%2BPC9zYW1sMnA6UmVxdWVzdGVkQXV0aG5Db250ZXh0Pjwvc2FtbDJwOkF1dGhuUmVxdWVzdD4%3D=&AWAD%253A1300%253AONID%253A1a8cc569e7594969893b309c9a99a918=

Environment

Release : 21.0.2, 21.0.3

Component : AUTOMATION ENGINE

Cause

Defect

Resolution

SAML Request is incomplete due to  the absence of the 'SAMLRequest=' and 'RelayState=' in the raw payload of the request.

Upgrade to the following version containing the fix, or higher:

Automation.Engine 21.0.5 - released