Symantec Identity Manager Weblogic OIDC authentication is failing

Products

• CA Identity Manager

Issue/Introduction

While using Weblogic, OIDC authentication is failing with the error below.

<2024-10-16T04:47:20.768 PST> <Error> <HTTP> <BEA-101020> <[ServletContext@51793559[app:iam_im module:/iam/im path:null spec-version:3.1]] Servlet failed with an Exception
java.lang.NoSuchMethodError: com.nimbusds.jwt.proc.DefaultJWTClaimsVerifier.verify(Lcom/nimbusds/jwt/JWTClaimsSet;)V
        at 

Environment

IDM 14.5.1 with WebLogic 12.2.1.4

Resolution

We have certified the WebLogic 12.2.1.3.0 version and usually will not verify each minor version of the application server.

The WebLogic 12.2.1.4.0  version has com.nimbusds.nimbus-jose-jwt.jar version 6.0 and this jar has DefaultJWTClaimsVerifier.verify(JWTClainmSet) method. We found that WebLogic has proper jars with proper methods

It's fine to have that line in the weblogic.xml file as this line gives priority using native jars. In R15 we are updating all our 3rd parties so will update this jar as well.

       <package-name>com.nimbusds.jwt.*</package-name>

Reference:

https://knowledge.broadcom.com/external/article/382079