getLocalServiceURL uses localhost (127.0.0.1) instead of public IP

Products

• SITEMINDER
• CA Single Sign On Agents (SiteMinder)
• CA Single Sign On Federation (SiteMinder)
• CA Single Sign On Secure Proxy Server (SiteMinder)

Issue/Introduction

When running a Policy Server (idp.example.net) for a Legacy Federation Journey (1), the getLocalServiceURL call picking the localhost (127.0.0.1) instead of sp.example.com.

 

Environment

  IDP : idp.example.net
  SP : sp.example.com

 

Resolution

 

• Ensure on both environment IdP and SP, both services FQDN is resolved correctly to the external IP in the system's hosts files and the command nslookup reports the same match;
• Ensure the journey in the browser starts also with a request to the sp.example.com server.
  
  To illustrate:
  
  http://sp.example.com/affwebservices/public/saml2authnrequest?ProviderID=<idpprovider id>

Additional Information

 

(1)

    Use a Sample Configuration to Learn About Legacy Federation