Policy Xpress Web Service Exception During Data Element Testing - Identity Manager

Products

• CA Identity Manager
• CA Identity Governance
• CA Identity Portal

Issue/Introduction

When executing a web service call defined in a Policy Xpress (PX) Data Element, the test fails with the following error: Error: The test has failed to run with the following error: "Failed running web service" which was caused by "Internal Error."

Note that the same web service call functions correctly when executed via the PX Action tab, but fails when executed via the Data tab.

Environment

Identity Manager 14.5

Cause

The Policy Xpress Data tab code path differs from the Action tab. When the SOAP request passes a WSS security token, the Data tab code is currently unable to transform this token. This results in the request being identified as "invalid" and subsequently rejected before it is dispatched to the web service.

Resolution

Support for specific web service tokens in Policy Xpress Data Elements is under consideration for a future release. In the interim, use the following workaround:

1. Utilize CA API Gateway: Configure a CA API Gateway to handle the secure communication.
2. Add Certificate: Add the necessary X509 certificate into the SOAP body within the Gateway policy.
3. Secure Communication:
   • The CA API Gateway handles communication with the end web service.
   • The Policy Xpress Data element connects to the CA API Gateway using standard, supported authentication methods (Basic username/password).

Additional Information

For additional configuration details, see the CA API Gateway Documentation.

To speak with a customer representative or a Support Engineer see Contact Support. Scroll to the bottom of the page and click on your respective region.