Saturday, February 6, 2016

Oracle Access Manager 11g not Returning ORCLGUID to the Webgate

OAM Test Response Headers ORCLGUID value show "NOTFOUND or "NULL" as show below

HTTP_USER_NAME="EBSADMIN"
HTTP_USER_ORCLGUID="NOT_FOUND"

Please follow below solution:

1. Take a backup of oam-config,xml from $DOMAIN_HOME/config/fmwconfig directory.
2. Edit oam-config.xml file and add the following parameter and value for the concerned directory server.
Type="xsd:string">orclguid
OR
Navigate to "User Identity Stores" in OAM Console and then to the specific LDAP store in concern and add the relevant attributes under the section "Prefetched Attributes" 3. Restart the managed server. Attribute value would be displayed in header on access to the protected resource.

Bug 19438948
This issue occurs when Oracle Access Manager 11gR2 Bundle Patch 2 (BP2) or Oracle Access Manager 11gR2 Patchset 2 (PS2) have been applied:
When testing response headers in step 4.4.3 a null value is returned for USER_ORCLGUID, instead of a valid value
OR
When a user attempts to login to Oracle E-Business Suite, after entering their credentials the following error is displayed in the browser:
Internal Error: Webgate allowed access to protected page GUID=null
As a workaround specify 'orclguid' as a 'Prefetched Attribute' in Oracle Access Manager:
Logon to the OAM Console:
http://.:/oamconsole
Click 'User Identity Stores' (in the 'Configuration' section) > select the Identity Store with a type of 'OID' (e.g. 'EBSIdStore' or 'OIDIdentityStore') in the 'OAM ID Stores' table >
Click 'Edit' > Enter orclguid in the 'Prefetched Attributes' field and click 'Apply' to save

No comments:

Post a Comment