New OID User Cannot Login To Application - Getting HTTP 403 Error (Doc ID 1183675.1)

Last updated on FEBRUARY 13, 2024

Applies to:

Symptoms

Custom Java application is deployed on OC4J and configured as partner application to SSO.

• Unable to login to the application with newly created users and errors out with "HTTP 403 Forbidden Error".
  
  
• Existing users are able to login.
  
  
• The new users are able to login to OIDDAS and also ldapbind against OID works fine.

After initial investigation, it was found that the newly created user was not part of the Group authorized by the application (Specified through the security settings in orion-application.xml and web.xml of the application). Even after the newly created user was assigned the role/group required by the application, the HTTP 403 error persisted. With no further changes made, the same user worked fine after a few hours.

Why is this delay and how can this be avoided?

VERSION

Oracle Application Server 10.1.2.3.0

Changes

Cause

My Oracle Support provides customers with access to over a million knowledge articles and a vibrant support community of peers and Oracle experts.