How to config Rules between Service Identity and Relying Party Application in Azure ACS?

I am going to implement an Authorization Server talks to ACS OAuth2 endpoint with Java following this
article.
First, I created a Service Identity using the ACS Management Service by OData protocol, and then add a password credential in ACS Management Portal.
Id: "22194691",
Name: "oauth2-client-sample",
Description: "Test",
RedirectAddress: "http://localhost:8080",
SystemReserved: false
Second, I created a relying party application in ACS Management Portal with no Identity Providers, assume that its ID is 22194640 and its Realm is "https://oauth2-res-sample.herokuapp.com/".
Third, I created a Delegation by ACS Management Service and got an Authorization Code(for example, XkbSXdM0d0v8wQ835hvKUg==) from ACS,
POST /v2/mgmt/service/Delegations
Authorization: Bearer XXXX(SWT from ACS)
Content-Type: application/json
{"ServiceIdentityId": "22194691", "RelyingPartyId": "22194640",
"NameIdentifier": "[email protected]", "IdentityProvider": "WAAD"}
At last, I posted the authorization code and service identity to ACS to request an Access Token,
POST v2/OAuth2-13
Content-Type: application/x-www-form-urlencoded
grant_type=authorization_code&client_id=oauth2-client-sample
&client_secret=xxxxxxxx&code=XkbSXdM0d0v8wQ835hvKUg%3D%3D
&redirect_uri=http%3A%2F%2Flocalhost%3A8080
&scope=https%3A%2F%2Foauth2-res-sample.herokuapp.com%2F
But I got the following error from ACS,
error: "invalid_request" error_description: "ACS50000: There was an error issuing a token. ACS60000: An error occurred while processing rules for relying party 'https://oauth2-res-sample.herokuapp.com/'
using the service identity or identity provider named 'oauth2-client-sample'. ACS60000: Policy engine execution error. Trace ID: e8a1fa8c-19d8-4271-8095-80938ea45e69 Correlation ID: 82a0e83e-202f-4957-8871-cdcdf927b512 Timestamp: 2015-02-23 02:21:34Z"
This is the Rule Group for the relying party application, pass through all the first claims to output. But
I don't know what's wrong.

Hello Cary!
Request your confirmation if you could resolve the problem stated above? If no, please let us know at the earliest and we'll be glad to help. If yes, please share your valuable inputs for community's reference.
Thank you,
Arvind

Similar Messages

  • Difference between service pack and support pack

    Hi,
    what is the exact difference between service pack and support pack. Are they same?
    The version details presnt in integration builder -> help-> inforamtion  of my XI server are as follows :
    Service pack: 09
    Release: 645_VAL_REL
    does it mean that the both support package and service package for my XI server are 09?
    thanks in adavance
    regards
    Jagruthi

    1. A service pack (in short SP) is a collection of updates, fixes and/or enhancements to a software program delivered in the form of a single installable package. Service packs are usually numbered, and thus shortly referred to as SP1, SP2, etc. It is notable that they may bring, besides bug fixes, entirely new features.
    http://help.sap.com/saphelp_nw04/helpdata/en/57/a21f407b402402e10000000a1550b0/frameset.htm
    Service packs in 2004 and 2004s;
    in 2004 - in 2004s
    SP12 & < - SP04 http://XI 3.0
    SP13 + 14 - SP05 http://PI 7.0
    SP15 - SP06
    SP16 - SP07
    SP17 - SP08
    SP18 - SP09 and so on...
    2) Support pack -
    http://help.sap.com/saphelp_nw04s/helpdata/en/9e/5bc53f3e0f0228e10000000a114084/frameset.htm
    For the ABAP parts of usage type PI, this is the implementation of support packages. For the Java parts, the deployment with the Java Support Package Manager (JSPM) is used.
    You can find currently available support packages on SAP Service Marketplace at service.sap.com/sp-stacks.
    A description of how to apply support packages is available in SAP Note 879289.

  • Difference between Service Enabling and XI Enabling

    Is there any difference between Service Enabling and XI enabling?
    If so, can anybody explain the difference??
    Message was edited by:
            Nalini G

    Hi Sejoon,
       Thanks a lot for such an informative document.
    It has helped me a lot to know more and more:-)
    Thanks once again!
    I have another important question. Suppose , I have developed some asynchronous service for which there wouldn't be any response, then how can we get to know if the request which was sent to the target system has reach perfectly or not?
    In other words, how do we test if that whole Asynchronous service is working fine or not?
    Is there any information which would help us to know if the request has successfully reached to the destination system?
    Please let me know about this.
    Best Regards,
    Nalini

  • Difference Between Service Account and User Account

    What is the Difference Between Service Account and User Account

    Hello Mohit,
    Basically there are two types of approches which you should understand.
    In many environments, administrators prefer to simply create a domain user account and assign appropriate privileges to it. Then this user account is used in order to start a specific service on a computer.
    In that case there is really no difference between a user account and the so called service accounts. Since this service account is simply a domain user, all the task related to managing the domain users apply to it. For example you
    should keep the password up to date manually. Some environment move step forward and assign
    Deny Logon Locally of this type of service account in order to enhance the security.
    The second concept is Managed Service Accounts. There are plenty of differences between a Managed Service Account and a User Account.
    The Display Icon is different from a view perspective.
    The type of object is different. 
    Managed service accounts password management is automatic.
    You can not create Managed Service Accounts using GUI. They are only created using Powershell.
    You can refer to link below for more inormation:
    Service Accounts Step-by-Step Guide
    Regards.
    Mahdi Tehrani   |  
      |  
    www.mahditehrani.ir
    Please click on Propose As Answer or to mark this post as
    and helpful for other people.
    This posting is provided AS-IS with no warranties, and confers no rights.
    How to query members of 'Local Administrators' group in all computers?

  • Diference between Service tax and GTA service tax

    Hi,
    Kindly tell me what is the difference between service tax and GTA service tax and their accounting entries in SAP ?
    With Regards,
    Samrat

    Hi,
    Service Tax is charged by the service vendor and you pay the service tax to the vendor along with his payment. Once you pay the service tax, it is the liability of the vendor to pay the service tax amount collected from you to the Government.
    GTA is Goods Transport Authority. When you receive any service from any transport vendor, he will not charge service tax from you though it attracts service tax. It is your liability to pay the service tax to Government for the services received from the transport vendor.
    In case of normal service tax it is treated as input tax and credit for the same is taken (similar to excise). But, in case of GTA you have to create the liability at the time of receiving the service and make the payment directly to the Government.
    Regards
    Ramakrishna

  • How to provide joins between oracle tables and sql server tables

    Hi,
    I have a requirement that i need to generate a report form two different data base. i.e Oracle and Sql Server.
    how to provide joins between oracle tables and sql server tables ? Any help on this
    Regards,
    Malli

    user10675696 wrote:
    I have a requirement that i need to generate a report form two different data base. i.e Oracle and Sql Server. Bad idea most times. Heterogeneous joins do not exactly scale and performance can be severely degraded by network speed and b/w availability. And there is nothing you can do in the application and database layers to address performance issue at the network level in this case - your code's performance is simply at the mercy of network performance. With a single glaring fact - network performance is continually degrading. All the time. Always. Until it is upgraded. When the performance degradation starts all over again.
    If the tables are not small (few 1000 rows each) and row volumes static, I would not consider doing a heterogeneous join. Instead I would rather go for a materialised view on the Oracle side, use a proper table and index structure, and do a local database join.

  • How can I distinguish between the first and the rest in Smartforms??

    I have made an Invoice in Smartform. I have to take three copies of that. In the first copy it will be printed "ORGINAL INVOICE" and in the next copies it will print "Duplicate copy".  How can I distinguish between the first and the rest in Smartforms??
    Regards,
    Subhasish

    >
    Subhasish Ganguly wrote:
    > I have made an Invoice in Smartform. I have to take three copies of that. In the first copy it will be printed "ORGINAL INVOICE" and in the next copies it will print "Duplicate copy".  How can I distinguish between the first and the rest in Smartforms??
    Hello Vamshi,
    As per the OP's requirement he has to print 3 copies of the invoice. Which according to my understanding should be printed at the same time ? May be i am wrong in interpreting this.
    You must be knowing you can control the print params of the SmartForms in CONTROL_PARAMETERS where you set the NO_DIALOG & in the OUTPUT_OPTIONS pass the number of copies.
    I think the solution you have proposed the "Original Copy" will be printed only once. (Correct me if i am wrong)
    Every time the user prints the invoice again he will be getting a "Duplicate Copy". If this is what the OP wants the logic is perfect
    Cheers,
    SUhas

  • Difference between Service order and service contract

    Hi
    Can any one plz differenciate the service contract and service order??
    why only service contract products can carry object list entries and why not service products??
    Thanks in advance.Appriciated with points.
    Regards,
    Nagi Reddy

    Service Order:
    A service order is a short-term agreement between service provider and service recipient, in which one-time services are ordered by the service recipient and resource-related billing performed upon completion. Such an order could be, for example, to maintain or repair some equipment, making it necessary to send a technician along with spare parts. These services are usually billed.
    Service Contracts:
    Service contracts are outline agreements with business partners which define services offered for a particular period. You support service contracts by processing contract-based and planned services.
    Service contracts represent long-term service agreements with customers in relation to the content and scope of services guaranteed within specific tolerance limits for certain parameters, for example, within a predefined timeframe.
    I hope this helps

  • What is the difference between Service Station and Tempro?

    Searched for information on this but haven't been able to find it:
    What is the difference between Service Station and Tempro?
    I have just run the Toshiba Upgrade Assistant and it has installed Service Station but Tempro is already installed and seems to do the same thing.
    Regards
    Bushy

    Hi
    Both tools are from Toshiba an notifies you about the new driver updates available on the Toshiba driver page.
    As far as I know Tempro is little bit older than the Service Station.
    Furthermore the Service Station seems to provide a little bit more options and features as Tempro tool.
    However, i recommend using only one Utility my favorite is Service Station

  • Difference between Service BOM and Manufacturing BOM

    One fundamental question
    What is the difference between Service BOM and Manufacturing BOM. Also what is the difference between Manufacturing BOM and Engineering BOM.
    Why should a business create these 3 kinds of BOM's for their operations. cant 1 kind of BOM suffice ?

    This is a business definition that your business people should be able to tell you.
    Both are BoMs - it's just a question of which parts are defined under each category.
    Usually, "Service" BOMs are created by service org personnel as and when required, eg at new item introduction or new option introduction.
    "Manufacturing" BoMs are created by Engineering personnel and are the ones used when creating an order for a machine.
    Hope that it helps.
    Cheers,
    TC

  • EPM9.3.1: Difference between service pack and service fix

    Hi,
    Tell me pls, what is a difference between service pack and service fix of Oracle EPM products for 9.3.1 release?
    Is it an installation process difference&

    Hi,
    Usually a service pack is a consolidation of service fixes / patches.
    Cheers
    John
    http://john-goodwin.blogspot.com/

  • Difference between service request and service order

    hi all,
    What is the differnce between service request and service order? when to use what?
    Thanks
    Raghav

    Service Order -> "You use service orders to record the details of a one-off service agreed upon by a service provider and a service recipient. Service orders contain all the information needed to plan, execute, and bill for a service."
    Service Request -> "You use service request management to reliably submit, dispatch, approve, monitor, and fulfill requests for service by your customers. Service requests can be used internally by companies where a department delivers services, for example, in shared service center scenarios, as well as in external customer-facing scenarios.
    Service requests can be logged through a service desk, directly by the service personnel, or by the users themselves into the system and then, if necessary, can be dispatched to the appropriate personnel for service delivery."
    Taken from http://help.sap.com/
    Rg,
    Harshit

  • Difference between service agreement and  service contract

    Hi gurus
    please explain the exact difference between service agreements and service contracts

    Hi rajaram,
    Service agreement contains only pricing details.
    While in case of contracts it contains pricing details, warrenty details & sla details.
    Pricing agreement is a subset of contract.
    Best Regards,
    Pratik Patel
    Reward with points if it is of any help to you!

  • I am new to Apple; how do i toggle between the pc and and overhead projector? Which keys?

    I am new to Apple; how do I toggle between the pc and an overhead projector? Which keys?

    Not sure how your question relates to an AirPort Extreme, AirPort Express or Time Capsule......these products:
    It appears that you have a question about a MacBook Air.  If that is the case, then please post your question in the support area for the MacBook Air linked below:
    MacBook Air

  • Link Between Service Notification and Sales Order

    Hi All,
    In our business process, we will create sales order from Service Notification and we can see the same in the Document flow. But when i check in the VBFA table, there are no entries. I would like to know how the document flow is updated without updating the VBFA Table or is there any other table gets updated for this flow.
    Please guide me.
    With Regards
    Vinu.N

    Hello Vinu
    For one Sales Order # figures in Notification header table- VIQMEL-VBELN.
    Similarly Notification # figures in Sales Order Header table- VBAK-QMNUM
    That is a solid link right there.
    I Also guess technical objects like Equipment, Serial number also form link between the Sales and Service Documents.
    Also check out the logic in document flow program RIBELF20, may be it will give you the clues to the problem.
    Hope this helps.

Maybe you are looking for