EmptyToken obtained from iContentHelper Assertion via Policy Server

Products

• SITEMINDER
• CA Single Sign On Federation (SiteMinder)
• CA Single Sign On Agents (SiteMinder)
• CA Single Sign On SOA Security Manager (SiteMinder)

Issue/Introduction

 

When running Policy Server and Assertion Generator, Custom SDK Web Service using iContentHelper (1) that interact with the Policy Server Federation and Custom SDK remember me authentication scheme.

The Custom Custom SDK Web Service code doesn't handle correctly the data sent by the Policy Server.

The Custom Custom SDK Web Service reports an error:

  "Empty token from iContentHelper', actor='null'"

The Web Service client call for receives an emptyToken.  

The iContentHelper can't handle the Assertion correctly, and it reports an empty envelope:

2023-08-31 14:43:21,245 43 [DEBUG] * xxx 649ms SiteMinderAdapter CreateSessionAssertion[xxx].execute():     MessageBody (byte[])   = <soapenv:Envelope xmlns:soapenv="http://schemas.xmlsoap.org/soap/envelope/"><soapenv:Header/><soapenv:Body/></soapenv:Envelope>
2023-08-31 14:43:21,245 43 [DEBUG] * xxx 649ms SiteMinderAdapter CreateSessionAssertion[xxx].execute():     MessageBody (DOM)      = <soapenv:Envelope xmlns:soapenv="http://schemas.xmlsoap.org/soap/envelope/"><soapenv:Header><wsse:Security xmlns:wsse="http://docs.oasis-open.org/wss/2004/01/oasis-200401-wss-wssecurity-secext-1.0.xsd" xmlns:wsu="http://docs.oasis-open.org/wss/2004/01/oasis-200401-wss-wssecurity-utility-1.0.xsd"/></soapenv:Header><soapenv:Body/></soapenv:Envelope>

Environment

  Policy Server 12.8SP7 on RedHat 7;
  SDK Custom Agent 12.8SP7 on Tomcat 9.0.62 on RedHat 7;
  Advanced Authentication 9.1.0.1;
  

Resolution

Upgrade the Policy Server top 12.8SP8 when this one will be available to benefit from fix DE576554.

 

Additional Information

 

(1)

    Java XML Agent Content Helper API