Intermittent Oracle Access Manager Operation Error ErrNoFormUrl With Chained Non-IIS WebGate to IIS IWA WebGate Authentication (Doc ID 1076960.1)

Last updated on MARCH 08, 2017

Applies to:

COREid Access - Version: 10.1.4.0.1 to 10.1.4.3.0 - Release: 10g to
Information in this document applies to any platform.

Symptoms


In an Oracle Access Manager (OAM) 10.1.4 environment where a non-IIS application WebGate is redirecting to a Microsoft IIS WebGate for Integrated Windows Authentication (IWA) users intermittently see the following error:

Oracle Access Manager Operation Error
The form authentication scheme Form login for Non-IIS IWA does not have a challenge parameter form:formURL, where formURL is the URL of the login form.

'Non-IIS IWA' in the above error text is the name of the Form authentication scheme configured in the Policy Domain protecting the resources deployed on the non-IIS application webgates, so this name will differ according to the environment.

The URL displayed in the address bar is something like

https://sso.oracle.com/access/oblix/apps/webgate/bin/webgate.dll?status%3D500%20errmsg%3DErrNoFormUrl%20p1%3DKerberos%2520-%2520Form%2520authentication

The authentication schemes have been configured following the instructions in <<Note:361312.1>> - How To Setup Integrated Windows Authentication (IWA) as an Authentication WebGate.

IWA login to resources deployed on the IIS WebGate succeeds every time without any errors.&nbsp;

The issue is specific to protected resource access via non-IIS WebGates.

Steps to reproduce

1. Login to the Windows domain on a client PC and start a new browser session.
2. Access a protected resource deployed on the non-IIS WebGate.
3. In most cases this first time the IWA authentication will succed and the resource will be displayed.
4. Close the browser.
5. Open a new browser session.
6. Access a protected resource deployed on the non-IIS WebGate again.
7. 'Oracle Access Manager Operation Error' should occur. If not then repeat steps 4 - 6 again until it occurs.


Cause

Sign In with your My Oracle Support account

Don't have a My Oracle Support account? Click to get started

My Oracle Support provides customers with access to over a
Million Knowledge Articles and hundreds of Community platforms