Unable to remove or edit OIDC clients in VCF Operations Identity & Access pane due to stale vIDB resource IDs

Products

• VCF Operations

Issue/Introduction

• In VMware Cloud Foundation (VCF) Operations, users cannot edit or delete OpenID Connect (OIDC) clients for "Other Components" within the Identity & Access pane.
• Editing the OIDC client triggers a 400 Bad Request validation error: ClientAppInfo.issuerUrl cannot be null and ClientAppInfo.clientId cannot be null.
• Deleting the OIDC client results in a 500 Internal Server Error (API error code 1548) with the message: Failed to perform CLIENT_APP_TASK::GET task.

Environment

• VMware Cloud Foundation (VCF) Operations 9.x
• VCF SSO with Identity Broker (vIDB) 9.x

Cause

This issue occurs when OIDC client applications are mapped to stale or decommissioned VMware Identity Broker (vIDB) resource IDs, when a management task (edit/delete) is initiated, the vcfops-bridge service attempts to retrieve the OIDC client details from the underlying management database. If the vIDB resource ID no longer exists in the identity provider's registry, the service fails with a java.lang.RuntimeException: Adapter resource not found. Because the vcfops-bridge cannot validate or "GET" the object, the API returns a validation error (400) or an execution failure (500).

Resolution

To resolve this issue, please follow the steps outlined in the following Knowledge Base article: Deletion of Identity Broker from VCF Operations 9.1

If the script provided in the article fails to clean up the stale vIDB resource references, please contact Broadcom Support and reference this KB for further assistance.