SAML IDP Initiatiation Issue, loop after authentication
search cancel

SAML IDP Initiatiation Issue, loop after authentication

book

Article ID: 30493

calendar_today

Updated On:

Products

CA Single Sign On Secure Proxy Server (SiteMinder) CA Single Sign On SOA Security Manager (SiteMinder) CA Single Sign-On

Issue/Introduction

When doing Federation IDP initiated transaction, after the successfull authentication, we are getting redirected to the /redirect/redirect.jsp and looping.

In the FWSTrace.log we can see:

[SSO.java][processRequest][Current session state is: false]
[SSO.java][processRequest][Current session is not a valid session.]
[SSO.java][processRequest][Session cookie does not exists. redirecting to authentication url [CHECKPOINT = SSOSAML2_AUTHENTICATIONURL_REDIRECT]]

 

Environment

PS, WAOP are all v12.52 SP01 CR01
Policy Store and User Store Oracle 11.1.1.7.1

Cause

No User information in the session.

Resolution

Checking the ACO for Disablesessionvars=no fixed the problem.

Indeed, the Webagent should set the default session variables in order to propagate them to the Webagent Option pack.