Status: Not Authenticated. Reject sXX/rX : failed to resolve realm 'xx-xxxxxxxx-xxxx-xxxx-xxxx-xxxxxxxxxxxx'

Products

• CA Single Sign On Agents (SiteMinder)

Issue/Introduction

[12/07/2022][12:55:50.882][13:45:51][13176][139915917241088][Sm_Auth_Message.cpp:5416][CSm_Auth_Message::FormatAttribute][s61/r47][sdl-http-cr01][][cjjx695][][][][][][][][][][][][][][][][Reject s61/r47 : failed to resolve realm 'xx-xxxxxxxx-xxxx-xxxx-xxxx-xxxxxxxxxxxx'][Send response attribute 158, data size is 82]

Environment

Release : 12.8.x

Cause

The OID's that are not found are OID's created by the IDM integration.

This can be caused by:

• Orphaned objects due to IDM integration removal
• The policy servers are out of sync

Resolution

Possible resolutions:

• Remove orphaned OID's related to IDM through XPSExplorer.
• Re-sync the policy stores to resolve the errors and the issue.
  • CA Directory - DSA out of sync