Empty Policy <WSP:ALL/> Does Not Work On WebLogic
(Doc ID 1467665.1)
Last updated on OCTOBER 03, 2018
Applies to:Oracle WebLogic Server - Version 10.3.5 to 22.214.171.124
Information in this document applies to any platform.
There is a need to specify to use an empty Pollicy Alternative.
For example: allow clients to provide a Saml Token or provide none (Empty Policy Alternative)
Although <wsp:All /> is present, clients who do not provide a Saml Token are being rejected with the following:
Error on verifying message against security policy Error code:1000
new Policy file introduced
The Symptom might be first observed after the Apply or Inclusion of:
<Bug:12598084> - SECURITY HEADERS MISSING - ELEMENT NOT UNDERSTOOD
To view full details, sign in with your My Oracle Support account.
Don't have a My Oracle Support account? Click to get started!
In this Document