Getting error, No SAMLart parameter in oracle identity federation.

what does the following error means,
Web Intersite Signon Error
RECEIVER: ERROR: No SAMLart parameter in the inter-site signon request.
We are destination domain and the client is getting this error when trying to federate to our environment. The method is Post profile.
Thanks.
Edited by: user504421 on Mar 20, 2009 1:34 PM

With POST, it looks for SAMLArt in the URL (steps 3 and 4 in http://download.oracle.com/docs/cd/E10773_01/doc/oim.1014/b25355/deployinstall.htm#CHDFEHIC). Are you sure you don't have anything else going on, e.g artifact resolution based on a reference to an assertion (vs full assertion) in the URL?

Similar Messages

Error in Oracle identity federation SSO testing

Hi All
I need help on oracle identity federation task. Any one please try to give solution for my bug. Am new to this product .Comming to issue am following below mentioned link ( http://www.oracle.com/webfolder/technetwork/tutorials/obe/fmw/oif/11g/r1/oif_tran_map/oif_tran_map.htm#top ) . as per document i created two machines one for Service provider and another one for identity provider. at last am trying to test the SSO between the both SP & IDP one pop up window is appering when i pass the credentials the below mentioned error am getting .
Error 401--Unauthorized
From RFC 2068 Hypertext Transfer Protocol -- HTTP/1.1:
*10.4.2 401 Unauthorized*
*The request requires user authentication. The response MUST include a WWW-Authenticate header field (section 14.46) containing a challenge applicable to the requested resource. The client MAY repeat the request with a suitable Authorization header field (section 14.8). If the request already included Authorization credentials, then the 401 response indicates that authorization has been refused for those credentials. If the 401 response contains the same challenge as the prior response, and the user agent has already attempted authentication at least once, then the user SHOULD be presented the entity that was given in the response, since that entity MAY include relevant diagnostic information. HTTP access authentication is explained in section 11.
Any one please try to give solution for this bug or else please give me the hints perform my task ( Transient Federations ).

Hi All
I need help on oracle identity federation task. Any one please try to give solution for my bug. Am new to this product .Comming to issue am following below mentioned link ( http://www.oracle.com/webfolder/technetwork/tutorials/obe/fmw/oif/11g/r1/oif_tran_map/oif_tran_map.htm#top ) . as per document i created two machines one for Service provider and another one for identity provider. at last am trying to test the SSO between the both SP & IDP one pop up window is appering when i pass the credentials the below mentioned error am getting .
Error 401--Unauthorized
From RFC 2068 Hypertext Transfer Protocol -- HTTP/1.1:
*10.4.2 401 Unauthorized*
*The request requires user authentication. The response MUST include a WWW-Authenticate header field (section 14.46) containing a challenge applicable to the requested resource. The client MAY repeat the request with a suitable Authorization header field (section 14.8). If the request already included Authorization credentials, then the 401 response indicates that authorization has been refused for those credentials. If the 401 response contains the same challenge as the prior response, and the user agent has already attempted authentication at least once, then the user SHOULD be presented the entity that was given in the response, since that entity MAY include relevant diagnostic information. HTTP access authentication is explained in section 11.
Any one please try to give solution for this bug or else please give me the hints perform my task ( Transient Federations ).

Getting error "enter valid parameter"

Hi,
I am getting error "enter valid parameter" in R/3 while trying to process inbound messages thru XI. I have assigned partner type as "KU" and store number as partner number in mapping. sxmb_moni shows that messages have been successfully sent to R/3 system.
But in R/3, transaction WPER shows above error and partner type as "LS" in control recod of idoc.
please help me in understanding how inbound idoc in R/3 is showing "LS" as partner type and picking the corresponding logical partner profile, instead of customer type partner profile.
Since in retail, store number is customer number , inbound sales data should be posted against this customer.

Hi Shaik,
just check when you send IDOC data from XI, then you are mapping the partner type field to which data.....map it to constant KU.............then on SAP R/3 in we20, add the IDOC in inbound parameter for KU partner and give processing code for it.
Hope this may solve your query.
Thanks,
Rajeev Gupta

Oracle Identity Federation or Microsoft ADFS

Hi,
There are two companies A & B having an isolated infrastructure. Currently we have an architecture where Company A is providing OAM-IWA based SSO functionality for its own users and not for Company B users. If Company B also wants to avail the benefits of IWA/SSO for an application hosted in Company AS what should they do? Please advise-
1. Implement Microsoft ADFS? Company B may not like it because they think ADFS might expose confidential attributes to Company A?
2. Implement Oracle Identity Federation? How will that fit in if we have OAM in place? Can OAM authenticate half of the user base and OIF do the rest? Pls advise
3. Implement OVD? I am not sure if OVD can authenticate userbase against AD credentials?
Pls let me know.
Thanks,

Since company A and B have isolated infrastructures, I assume they are separate companies and on separate networks, with the internet as the network that will allow users from company B to access the application hosted by company A. And I assume the application is a web application.
First, IWA is a function of the IIS web server and suppported browsers (IE and Firefox) and is independent of OAM or OIF. OAM 10g supports IWA when running a webgate on the IIS web server that is configured to accept IWA authentication. IWA will work on the Intranet, so employees of company A can use IWA to SSO to OAM in their environment. Likewise, if company B has their own deployment of OAM, they can use IWA to SSO their users to their instance of OAM.
If you deploy OAM 11g, there is no longer a dependency on IIS because OAM 11g support Windows Native Authentication. You can read OAM 11g documentation for details on WNA.
1) Regarding use of ADFS, I have no comment as I am not familiar with the details of ADFS.
2) Regarding using OIF, some questions and clarifications
- Does company B own a web SSO and/or federation product? Do they own OAM? Do they own OIF? If not, they'll need something that speaks SAML or another federation protocol supported by OIF.
- For company A, you can buy OIF and integrate with OAM, if necessary. Since company A is hosting the application that company B employees want to get to, they would most likely be configured as the service provider/relying party.
- For company B, you can buy OIF and integrate with OAM. And OAM can integrate with IWA. So a user could use IWA to seamlessy SSO to OAM and then follow a federation enabled link to company A's app and seamlessy SSO to that as well.
- There is some integration work to be done here. Specificaly, company B needs to have a way to send its users over to company A so they can import them into company A's app. You need to exchange some metadata and agree on a unique identifier to identify the users. Or if the app works by having company B users access it as a generic user or something, you need to set something up for that (such as passing the generic userID in the SAML assertion).
- I would probably deploy the app such that there were two entry doors. One door would be for company A's employees and would be internally accessible only and protected by OAM. Then I would have an externally accessible door that relied on OIF SAML and was configured as a relying party for company B's employees.
3) regarding OVD, I don't see how that is going to help you since each company is on a separate isolated infrastructure.

How to deploy Portal to Oracle identity Federation 10.2.0.4 ?

AIX5.3 Oracle iAS 10.2.0.2, 10.2.0.4
Oracle Identity Federation 10.2.0.4 was installed successfully.
How can i deploy portal of 10.2.0.2 to it`s instance ?
Simple installation of Portal into instance has no result.
Help please.

AIX5.3 Oracle iAS 10.2.0.2, 10.2.0.4
Oracle Identity Federation 10.2.0.4 was installed successfully.
How can i deploy portal of 10.2.0.2 to it`s instance ?
Simple installation of Portal into instance has no result.
Help please.

Integrating Oracle Identity Federation with homegrown SSO solutions

Hello,
We are trying to integrate Oracle Identity Federation with a home grown SSO solution.
The OIF FAQ document mentioned that Oracle provides programmatic interfaces to achieve this.
But I did not find any javadocs / samples on how this can be done.
Can anybody throw some insight into this..
Thanks

Hi Easwaran,
You need to upload the SAML 2.0 IdP/SP metadata for the peers you want to federate with. OIF will verify the metadata and add the peers in its Circle of Trust as IdP or SP depending on the metadata upoaded. If the peer is going to play both IdP and SP roles, you need to upload both the metadata files.
Similarly, in case you need to provide the peer your metadata, OIF makes this available at http(s)://host:port/fed/idp/metadatav20 (SAML 2.0 IdP metadata) or http(s)://host:port/fed/sp/metadatav20 (SAML 2.0 SP metadata) as required.
-Vinod

Oracle Identity Federation

Hi,
How to configure Global Logout using Oracle Identity Federation ?
Please provide the answer in detailed steps, if possible.
Thanks.

Not that much to configure really. Look through [this link|http://download-west.oracle.com/docs/cd/B28196_01/idmanage.1014/b25355/configuring.htm#BCGJGEJD].
-Vinod

Oracle Identity Federation - High Availability

Hello,
We are trying to figure out the high availability options supported by the Oracle Identity Federation. While reading the documentation we find it a bit confusing. We read the OIF Administrator Guide here: http://download.oracle.com/docs/cd/E10773_01/doc/oim.1014/b25355/advtopics.htm#CHDBCDFG
In Section "9.4 High Availability" it said that "Oracle Identity Federation supports the Cold Failover Cluster (CFC) or active-passive high availability configuration,". In the Application Server 10g guide also said the same and explicitly said that the active-active configuration is not supported for the OIF.
Then in Section "9.5 Setting Up a Load Balancer with Oracle Identity Federation" it explains how to set up a load balancer for the OIF. When it explains this it says that we can have several instances of OIF in different machines, configured with a load balancer. All these instances share the same transient database where the sessions are stored.
Which is the difference between this load-balancer-based configuration and an active-active high availability configuration? If one node of the load-balancer configuration goes down, the sessions administered by him are lost? That is the difference?
Thanks!
Leonardo

Hi
I am not very sure about High Availability configuration but for Load balancer as mentioned in the document, You have to have both the instances sharing transient database where sessions will be stored.
If both the OIF instances are not sharing transient database and you have LB sharing load, It will not work as sessions will be store in memory. So sessions from one OIF instance will not be known and available to the other instance of OIF.
Thanks
Kiran Thakkar

Error while installing OFM 11g - Oracle Identity management suite 11g

Hi,
I am getting following error while installing Oracle Identity management suite 11g (Oracle Internet Directory & Oracle Virtual Directory) on Red Hat Linux 5.0.
"Error in invoking target 'client_sharedlib' of makefile '/apps/idm/Oracle/OracleHome/Oracle_Home/rdbms/lib/ins_rdbms.mk"
the same error is repeating for others also i.e. 'all', 'install" etc.
Can you advice me how to overcome this?
Regards
Chinta

Hi Chinta,
Pl. check for all gcc and glibc OS packages compatibility with your your OS. This will solve your problem.
Also check that you are not installing a 32 bit IM software on a 64 bit machine or viceversa.
regards,
Sailesh

Getting Error with date parameter field -"Invalid DATE"

Hi
I created a report with 9.2 version. And i created 2 date parameter fields in it. And within crystal reports it works fine.
But If, I call from the VS2005 crystalreport.net(report document) SDK , i am getting error as Invalid Date" enter a Date Value". Actually it is a dtp control. how can i modify it.

There's not enough details to get a good understanding of your scenario, but it sounds like you're using some kind of date control to retrieve the date value and pass it to the report's parameter field at runtime. If this is correct, it sounds like the format of the date value from the control may not be what the report is expecting. To debug, I would first use hardcoded values when you set the report parameter fields to see what works. Then compare that to what the return value is from the control to see if they match. I suspect the formats differ. I did a quick search on the BOBJ kbase and found a couple of articles that may help you. I recommend searching as there are lots of information on how to set parameter fields at runtime. <a href="http://technicalsupport.businessobjects.com/KanisaSupportSite/search.do?cmd=displayKC&docType=kc&externalId=c2010247&sliceId=&dialogID=8582434&stateId=1 0 8584068" target="_blank">c2010247</a><a href="http://technicalsupport.businessobjects.com/KanisaSupportSite/search.do?cmd=displayKC&docType=kc&externalId=c2010251&sliceId=&dialogID=8582434&stateId=1 0 8584068" target="_blank">c2010251</a>-MJ

Getting error while importing schema with ORACLE TEXT

IMP-00003: ORACLE error 20000 encountered
ORA-20000: Oracle Text error:
DRG-52204: error while registering index
DRG-10507: duplicate index name: WORKORDER_Q, owner: SYS
ORA-06512: at "CTXSYS.DRUE", line 160
ORA-06512: at "CTXSYS.DRIIMP", line 115
ORA-06512: at line 2
IMP-00088: Problem importing metadata for index WORKORDER_Q. Index creation will be skipped
Database version - Oracle Database 11g Enterprise Edition Release 11.2.0.3.0 - 64bit Production
Os version - Linux nlxs1012.slb.atosorigin-asp.com 2.6.18-308.el5 #1 SMP Fri Jan 27 17:17:51 EST 2012 x86_64 x86_64 x86_64 GNU/Linux
We have take export of schema from production db now importing data to qa environment..
In import facing above error..

I am importing objects from P20_MAXIMO to Q25_MAXIMO to another database..
Below is import par file..
USERID='/ as sysdba'
FILE=exp_P20_MAXIMO_C2364781.dmp
LOG=imp_P20_MAXIMO__Q25_MAXIMO_C2364781_1.log
FROMUSER=P20_MAXIMO
TOUSER=Q25_MAXIMO
buffer=1000000
feedback=100000
Export parfile
userid='/ as sysdba'
owner=P20_MAXIMO
FILE=exp_P20_MAXIMO_C2364781.dmp
LOG=exp_P20_MAXIMO_C2364781.log
buffer=10000000
feedback=100000
statistics=none

Oracle Identity Federation Configuration Clustered mode

Hi,
I am facing issue while configuring OIF in clustered HA Mode in Linux env. The steps followed are:
1. Installed weblogic 10.3.2 and applied patch for 10.3.3 in both host machines
2. Ran the RCU utility for OIF successfully.
3. Installed Oracle Identity Management 11.1.1.2.0 by using the Universal Installer and than patch applied for 11.1.1.3 succesfully in both machines
4. Ran the Configuration script to configure OIF succesfully from Oracle_HOME/bin/ dir from first machine
5. Ran the pack.sh command to pack the configured domain from machine 1 by using the command
pack.sh -domain=/MW_HOME/user_projects/domains/OIFDomain/ -template=/opt/oifDomainTemplate.jar -template_name=OIF_Dom1
6. Ran the unpack script as below in the second host machine:
unpack.sh -template=/opt/oifDomainTemplate.jar -domain=/MW_HOME/user_projects/domains/OIFDomain
user_projects dir created successfuly on the second hosts
7. Now ran the config.sh script from Oracle_home/bin/ dir on the second host, selected the "Expand Cluster Configuration", provided the URL,port,username,pwd for host 1.
On the last screen under Expand cluster configuration, it is failing to start the Managed server. I am getting eeror as below:
Initializing WebLogic Scripting Tool (WLST) ...
Welcome to WebLogic Server Administration Scripting Shell
Type help() for help on available commands
Error: addTemplate() failed. Do dumpStack() to see details.
oracle.as.provisioning.util.ConfigException:
Error Applying template.
Cause:
A WLST Error occurred: Problem invoking WLST - Traceback (innermost last):
File "/tmp/tmp1330940819839.py", line 7, in ?
File "/tmp/WLSTOfflineIni7777084344564586922.py", line 89, in addTemplate
at com.oracle.cie.domain.script.jython.CommandExceptionHandler.handleException(CommandExceptionHandler.java:51)
at com.oracle.cie.domain.script.jython.WLScriptContext.handleException(WLScriptContext.java:1538)
at com.oracle.cie.domain.script.jython.WLScriptContext.addTemplate(WLScriptContext.java:420)
at sun.reflect.NativeMethodAccessorImpl.invoke0(Native Method)
at sun.reflect.NativeMethodAccessorImpl.invoke(NativeMethodAccessorImpl.java:39)
at sun.reflect.DelegatingMethodAccessorImpl.invoke(DelegatingMethodAccessorImpl.java:25)
at java.lang.reflect.Method.invoke(Method.java:597)
com.oracle.cie.domain.script.jython.WLSTException: com.oracle.cie.domain.script.jython.WLSTException: com.oracle.cie.domain.script.ScriptException: com.oracle.cie.domain.ConfigGroupsException: Multiple definitions of server-group JRF-ADMIN-SVR are not allowed
Action:
See logs for more details.
at oracle.as.provisioning.util.ConfigException.createConfigException(ConfigException.java:123)
at oracle.as.provisioning.weblogic.ASDomain._addTemplate(ASDomain.java:4206)
at oracle.as.provisioning.weblogic.ASDomain.addTemplate(ASDomain.java:4021)
at oracle.as.provisioning.engine.WorkFlowExecutor._addTemplates(WorkFlowExecutor.java:1395)
at oracle.as.provisioning.engine.WorkFlowExecutor.executeWLSWorkFlow(WorkFlowExecutor.java:472)
at oracle.as.provisioning.engine.Config.executeConfigWorkflow_WLS(Config.java:866)
at oracle.as.idm.install.config.IdMClusterConfigManager.doExecute(IdMClusterConfigManager.java:827)
at oracle.as.install.engine.modules.configuration.client.ConfigAction.execute(ConfigAction.java:335)
at oracle.as.install.engine.modules.configuration.action.TaskPerformer.run(TaskPerformer.java:87)
at oracle.as.install.engine.modules.configuration.action.TaskPerformer.startConfigAction(TaskPerformer.java:104)
at oracle.as.install.engine.modules.configuration.action.ActionRequest.perform(ActionRequest.java:15)
at oracle.as.install.engine.modules.configuration.action.RequestQueue.perform(RequestQueue.java:63)
at oracle.as.install.engine.modules.configuration.standard.StandardConfigActionManager.start(StandardConfigActionManager.java:158)
at oracle.as.install.engine.modules.configuration.boot.ConfigurationExtension.kickstart(ConfigurationExtension.java:81)
at oracle.as.install.engine.modules.configuration.ConfigurationModule.run(ConfigurationModule.java:83)
at java.lang.Thread.run(Thread.java:619)
progress in calculate progress11...
Thanks in Advance.

Hi iam37,
Follow this guide: http://docs.oracle.com/cd/E17904_01/core.1111/e12035/oif.htm#BAJGIAAA
Notice that you run the config.sh script on both OIF hosts and then run the pack.sh and unpack.sh. Be sure to use the pack.sh -managed=true from section 15.5 so that the AdminServer is not packed up and moved to oif host 2.
Seth

Interoperability of Shibboleth 2.0 with Oracle Identity Federation (OIF)

Hi,
I am in the process of selecting an identity federation product to interact eventually, both as an IdP and a SP, with a "pure Shibboleth" federation. I know the easiest, most obvious solution would be to go with Shibboleth as well, but after a comparative analysis, it seems that OIF would better fit (internally) my needs than Shibboleth, so here comes my question :
Has anybody successfully made OIF 11g and Shibboleth 2.0 interoperate yet ?
I work in the higher education vertical, and it would help me a lot to justify the budget for a POC if I'd knew it can be done...
Cheers,
Stephane

Ping Identity is another solution for you to look at if you're going the Shibboleth route. PingFederate and Shibboleth have the ability to interoperate. http://www.pingidentity.com/.

Getting error while saving data to Oracle 11g from java 1.5

I am getting the following error
java.lang.ArrayIndexOutOfBoundsException: -25471
at oracle.jdbc.driver.OraclePreparedStatement.setupBindBuffers(OraclePreparedStatement.java:2677)
at oracle.jdbc.driver.OraclePreparedStatement.sendBatch(OraclePreparedStatement.java:3681)
at oracle.jdbc.driver.OraclePreparedStatementWrapper.sendBatch(OraclePreparedStatementWrapper.java:1139)
Is this a java problem or oracle problem. My java version is 1.5.0_14 and my oracle is 11g. i have used the ojdbc5.jar also.
Can any one please help me to resolve this problem

This is the full stack trace. sorry i could not paste the code but this error comes when i try to do bulk insert. i am getting this error after inserting some records(may some 50 to 75 records).
java.lang.ArrayIndexOutOfBoundsException: -25471
at oracle.jdbc.driver.OraclePreparedStatement.setupBindBuffers(OraclePreparedStatement.java:2677)
at oracle.jdbc.driver.OraclePreparedStatement.sendBatch(OraclePreparedStatement.java:3681)
at oracle.jdbc.driver.OraclePreparedStatementWrapper.sendBatch(OraclePreparedStatementWrapper.java:1139)
at PreparedStatement.sendBatch(PreparedStatement.java:554)
at DBConnection.prepareCachedStatement(DBConnection.java:131)
at PlannedWorkOrderPeer.insert(PlannedWorkOrderPeer.java:154)
at PersistentMgr.insertObjs(PersistentMgr.java:1000)
at Transaction.commit(Transaction.java:463)

Error while Updating Client Metadata & Certs on Oracle Identity Federation

We need to update the certs on OIF 11g (we are Service Provider's) as our client certificates are expiring soon.
we got Metadata and Certificate from Client and these are step we followed for updating certs -
*1. In the OIF 11g - EM console, under OIF server-> security and trust -> under trusted CAs and CRLs, deleted the existing certificate for that partner and upload the new certificates.*
*2. Then Generate Metadata a new and upload it again under the partners side (OIF - EM - Under OIF server - Fedeartion)*
This is the ERROR we are getting -
May 29, 2012 12:41:19 PM oracle.security.fed.sec.SecurityServicesImpl processIncoming
SEVERE: Certificate was missing when trying to verify digital signature.
May 29, 2012 12:41:19 PM oracle.security.fed.http.translator.saml.SAMLProtocolMessageTranslator translateMessage
SEVERE: Signature verification failed for provider ID http://***.uat.*****.com:*
May 29, 2012 12:41:19 PM oracle.security.fed.controller.ApplicationController processServletRequest
SEVERE: Exception: {0}
oracle.security.fed.controller.web.action.RequestHandlerRuntimeException: XML signature verification failed.
*[2012-05-29T12:41:19.634-05:00] [wls_oif1] [ERROR] [FED-12064] [oracle.security.fed.controller.ApplicationController] [tid: [ACTIVE].ExecuteThread: '2' for queue: 'weblogic.kernel.Default (self-tuning)'] [userId: <anonymous>] [ecid: 004kJ1NbamTFw000jzwkno0003540016U3,0:1] [APP: OIF#11.1.1.1.0] [URI: https://*****-uat.*******:443/fed/sp/authnResponse20] Exception: {0}[[*
oracle.security.fed.controller.web.action.RequestHandlerRuntimeException: XML signature verification failed.
at oracle.security.fed.http.translator.saml.SAMLProtocolMessageTranslator.translateMessage(Unknown Source)
at oracle.security.fed.http.handlers.profiles.sp.AuthnResponseV20RequestHandler.generateEvent(Unknown Source)
at oracle.security.fed.controller.web.action.RequestHandlerSupport.perform(Unknown Source)
at oracle.security.fed.controller.ApplicationController.processServletRequest(Unknown Source)
Please let us know...where did we wrong.
Thanks in Advance!!!

Can you guys help?
801072, user12038686, OIDM,

Getting error, No SAMLart parameter in oracle identity federation.

Similar Messages

Maybe you are looking for