• State Not Answered
  • +1 person also asked this people also asked this
  • Replies 0 replies
  • Subscribers 94 subscribers
  • Views 803 views
  • Users 0 members are here
Options
Related

WebPortal SSO login issue

devendiran manickam
over 3 years ago

We are using OneIDM 8.1.1 and configured the HTTP Header (role-based) authentication as described in the below URL,

https://support.oneidentity.com/technical-documents/identity-manager/8.1.1/authorization-and-authentication-guide/21#TOPIC-1250085

As per the SSO logs (below) I see the HTTP headers are set properly,

[08/25/2020][02:06:41][8160][9968][CSmLowLevelAgent.cpp:2782][AuthorizeUser][000080fe00000000a774018d10cb145b-1fe0-5f44d4a0-26f0-03100029][*63.14.96.151][][carms][/IdentityManager/page.axd][AD_DOMAIN\manide][User 'CN=manide,OU=Accts,DC=xyz,DC=qad,DC=abc,DC=com' is authorized by Policy Server.]
[08/25/2020][02:06:41][8160][9968][CSmResponseManager.cpp:193][ProcessResponses][000080fe00000000a774018d10cb145b-1fe0-5f44d4a0-26f0-03100029][*63.14.96.151][][carms][/IdentityManager/page.axd][AD_DOMAIN\manide][Calling SM_WAF_HTTP_PLUGIN->ProcessResponses.]
[08/25/2020][02:06:41][8160][9968][CSmHttpPlugin.cpp:3333][CSmHttpPlugin::ProcessResponses][000080fe00000000a774018d10cb145b-1fe0-5f44d4a0-26f0-03100029][*63.14.96.151][][carms][/IdentityManager/page.axd][AD_DOMAIN\manide][Processing Authorization responses.]
[08/25/2020][02:06:41][8160][9968][CSmHttpPlugin.cpp:3340][CSmHttpPlugin::ProcessResponses][000080fe00000000a774018d10cb145b-1fe0-5f44d4a0-26f0-03100029][*63.14.96.151][][carms][/IdentityManager/page.axd][AD_DOMAIN\manide][Removing HTTP cache request headers.]
[08/25/2020][02:06:41][8160][9968][CSmHttpPlugin.cpp:3440][CSmHttpPlugin::ProcessResponses][000080fe00000000a774018d10cb145b-1fe0-5f44d4a0-26f0-03100029][*63.14.96.151][][carms][/IdentityManager/page.axd][AD_DOMAIN\manide][Setting custom HTTP header variable: 'HTTP_EID=277865748202']
[08/25/2020][02:06:41][8160][9968][CSmHttpPlugin.cpp:3440][CSmHttpPlugin::ProcessResponses][000080fe00000000a774018d10cb145b-1fe0-5f44d4a0-26f0-03100029][*63.14.96.151][][carms][/IdentityManager/page.axd][AD_DOMAIN\manide][Setting custom HTTP header variable: 'HTTP_Username=277865748202']

But in the IDM trace log i see this error,

2020-08-25 03:33:10.2698 ERROR ( WebLog 4jckc0eyjyv3wueggxgsctyl) : VI.Base.ViException: Current user could not be determined.
at VI.DB.Auth.HttpHeaderHelper.GetSsoIdentity(IAuthProps props)
at VI.WebRuntime.Communication.SingleSignOnIdentityCheck.Execute(IRequestModuleInfo validatorModuleInfo)
at VI.WebRuntime.Communication.HttpModuleWebRuntime.ContextOnPreRequestHandlerExecuteInternal() VI.Base.ViException: Current user could not be determined.
at VI.DB.Auth.HttpHeaderHelper.GetSsoIdentity(IAuthProps props)
at VI.WebRuntime.Communication.SingleSignOnIdentityCheck.Execute(IRequestModuleInfo validatorModuleInfo)
at VI.WebRuntime.Communication.HttpModuleWebRuntime.ContextOnPreRequestHandlerExecuteInternal() at VI.DB.Auth.HttpHeaderHelper.GetSsoIdentity(IAuthProps props)
at VI.WebRuntime.Communication.SingleSignOnIdentityCheck.Execute(IRequestModuleInfo validatorModuleInfo)
at VI.WebRuntime.Communication.HttpModuleWebRuntime.ContextOnPreRequestHandlerExecuteInternal()