Vip Auth hub scim Configuration requestCtxBase64 headers not being sent.

Products

• Symantec Identity Security Platform - IDSP (formerly VIP Authentication Hub)

Issue/Introduction

In Vip Auth hub Dynamic Environment Variable Substitution, after configured the requestCtxBase64 to send http headers as below, the values in idToken and clientContext are still coming through as NODATA, even though they are in the ID Token Hint. 

{"type": "http-header", "key" :"userDN", "value": "${idToken.user_dn}" },
{"type": "http-header","key":"key0","value":"${clientContext.value0}" },
{"type": "http-header","key":"key1","value":"${clientContext.value1}" },

Environment

OS: Kubernetes 1.32.x
VIP Authentication Hub version : 3.4.2

Resolution

Fix is scheduled to be available in 3.4.4-1073 and 3.5 release.

Also clientContext values are displayed/retrieved in HTTP request payload, not from HTTP headers, which is different from idToken retrieval.

Additional Information

VIP Authentication Hub 3.4.4 release is announced, please refer to the release notes.

More info on Dynamic Environment Variable Substitution.