IN IGA 15.0.1, SSO to IM stopped working after upgrading to the latest version

Products

• CA Identity Suite

Issue/Introduction

After uprading the IGA Environment to the latest version 15.0.1-4-fixpack1, the SSO no longer works towards Identity Manager.

It fails with an error:

ERROR [im.AuthenticationModule.SAML] (default task-359) SAML Response missing or empty Destination. ResponseID
ERROR [im.AuthenticationModule.SAML] (default task-359) Failed to verify the SAML Response from IDP

Environment

IGA 15.0.1 Fixpack1

Cause

Added an additional security in 15.0.1 Fixpack1 for SAML

Resolution

In the Identity Manager Admin console, there is a check box for "Trust Unsigned SAML Response". By selecting the checkbox and restarting the IM Services it works.

This was added some addition security in FP1 for SAML. The server enforces the SAML Response signature validation by default and fails if there is no signature. Enabling this checkbox bypasses the validation.

Add a signature for response and disable the checkbox.