Token prerequisite not met - Invalid Token in Policy Server with VIP Authentication Hub

Products

• SITEMINDER
• VIP Authentication Hub
• CA Single Sign On Secure Proxy Server (SiteMinder)

Issue/Introduction

Running Policy Server, when integrating with VIP Authentication Hub for MFA using the Email OTP method, the Policy Server reports error:

[Token prerequisite not met, Invalid Token.][Send response attribute 158, data size is 43]
[** Status: Authentication Attempt Failed.  Token prerequisite not met, Invalid Token.]

Identity Manager is not in use;
The flow is outside the change password scenario;

 

Cause

The problem comes from the fact that the CA Access Gateway (SPS) Federation services cannot connect to the backend service, or the backend service doesn't reply with the expected data:

backend service: https://vipauthhub.example.com:443/default/oauth2/v1/token

 

Resolution

Investigate the reason why the backend service

https://vipauthhub.example.com:443/default/oauth2/v1/token

doesn't return the expected data;