Browser is displaying HTML code at the /affwebservices/public/postgenerate URL

Products

• SITEMINDER
• CA Single Sign On Agents (SiteMinder)
• CA Single Sign On Federation (SiteMinder)
• CA Single Sign On Secure Proxy Server (SiteMinder)

Issue/Introduction

Siteminder was recently integrated with Auth Hub via SAML.  IDP-initiated SAML is working as expected end to end, however, SP-initiated SAML is not working.  Instead of automatically posting the data that's returned by the /affwebserivces/public/postgenerate URL, the browser is displaying the HTML code as text.

Environment

Access Gateway 12.9, all platforms

Cause

The /postgenerate URL was not setting the content-type response header and thus not controlling how the browser reacted to the web server response.

Resolution

This is a defect that will be fixed in a future release.  A patch is available for the 12.9 release.

Additional Information

The defect reference number is DE642616.