Assertion Generation Failure

Products

• CA Single Sign On Secure Proxy Server (SiteMinder)
• CA Single Sign On SOA Security Manager (SiteMinder)
• CA Single Sign-On

Issue/Introduction

Description:

- An error shows in the SMPS.log associated with the AssertionGenerator.java module: "Bad installation or configuration, Assertion handler can't be initialized. Leaving Assertion Generator Framework."

- The above error causes the application to fail to initialize.

 

Issue:

- Failing with the following: Bad installation or configuration, Assertion handler can't be initialized. Leaving Assertion Generator Framework. 

 

Environment: 

- Windows 2008 SP2 

- Apache 2.2 

- Web Agent - r12.52.0.142 

- Web Agent Option Pack - r12.52.0.142 

- Policy Server = 12.52.101.640 

 

Workaround:

- The error found in the logs: "Bad installation or configuration, Assertion handler can't be initialized. Leaving Assertion Generator Framework." is due to missing WS-Fed information.

 

- The following entries are necessary in the AssertionGeneratorFramework.properties file:

 

===========================

# SAML1.x federation service Assertion Handler mapping AssertionHandler.SAML1x=com.netegrity.assertiongenerator.AssertionHandlerSAML1x

# SAML2.0 federation service Assertion Handler mapping

AssertionHandler.SAML20=com.netegrity.assertiongenerator.saml2.AssertionHandlerSAML20

# TxM SAML1.1 Assertion Handler mapping

AssertionHandler.TxMSAML11=com.netegrity.ps.response.saml.AssertionHandlerTxMSAML11

# TxM SAML2.0 Assertion Handler mapping

AssertionHandler.TxMSAML20=com.netegrity.assertiongenerator.saml2.AssertionHandlerTxMSAML20

# WS Federation Assertion Handler mapping

AssertionHandler.WSFED10=com.netegrity.assertiongenerator.wsfed.AssertionHandlerWSFED10

# WS Federation 1.1/SAML11 Assertion Handler mapping

AssertionHandler.WSFED12.SAML11=com.netegrity.assertiongenerator.wsfed.AssertionHandlerWSFED12

# WS Federation 1.1/SAML20 Assertion Handler mapping

AssertionHandler.WSFED12.SAML20=com.netegrity.assertiongenerator.wsfed.AssertionHandlerWSFED12

# SAML2.0 Attribute Authority Assertion Handler Mapping AssertionHandler.SAML20AA=com.netegrity.assertiongenerator.saml2.AssertionHandlerAttrAuth

===========================

- If any of the above are missing, make a backup of the AssertionGeneratorFramework.properties file, and then place the above lines in the AssertionGeneratorFramework.properties file.

Environment

Release:
Component: SMFED