No Application Appears in the Drop-Down List When Configuring the VIP Authentication Service Template in SiteMinder VIP Authentication Service OIDC Client
Article ID: 446572
Updated On:
Products
Issue/Introduction
When running SiteMinder and configuring it as an OIDC Client for the VIP Manager Provider in the AdminUI, configuring the "VIP Authentication Service Template" and selecting "<vip_client>" as the Provider, no Application appears in the drop-down list.
Environment
- Policy Server 12.9 on Windows 2022
- JDK 17.0.15
- AdminUI 12.9 on Windows 2022
- Both the Policy Server and the AdminUI run on the same machine
Cause
As per documentation, the Application must be configured in VIP Manager with the CA Access Gateway (SPS) URL, plus the following endpoint (1):
/affwebservices/public/bctokencontroller
bctokencontroller is a CA Access Gateway (SPS) endpoint that handles the OAuth 2.0 authorization code callback when an external Identity Provider (such as VIP Authentication Service) redirects back to SiteMinder after authentication.
Redirect URL format:
https://<ssoGW>/affwebservices/public/bctokencontroller
Where <ssoGW> is your CA Access Gateway (SPS) hostname.
Example:
https://sso.example.com/affwebservices/public/bctokencontroller
Resolution
In the VIP Manager OIDC configuration, ensure the Application's "Redirect URL" field includes the /affwebservices/public/bctokencontroller URI:
https://<ssoGW>/affwebservices/public/bctokencontroller
Where <ssoGW> should be the full FQDN of the CA Access Gateway (SPS).
Additional Information
Feedback
