Using Virtualization in JPS User Breaks Nested Group Authorization (Doc ID 1453454.1)

Last updated on SEPTEMBER 21, 2023

Applies to:

Symptoms

You have two or more Windows domains, and want to integrate them with WCC. You have set up two AD providers in WLS, and you are using a virtualization setting in JPS, described in <Note 1359171.1>. You expect users from both providers to be able to log in to WCC, and for AD groups to appear as WCC Roles for users from the first provider. (In WCC 11.1.1.6 and later, you would expect both users to see Roles.)

What you actually see depends on WCC version:

• 11.1.1.5 and earlier: all users can authenticate. But users in NESTED groups do not see Roles.
• 11.1.1.6: as above, but additionally second domain users see no Roles, nested or otherwise.

In either case, with virtualization false, users in SECOND domain cannot authenticate.

Cause

My Oracle Support provides customers with access to over a million knowledge articles and a vibrant support community of peers and Oracle experts.