Empty Policy <WSP:ALL/> Does Not Work On WebLogic (Doc ID 1467665.1)

Last updated on AUGUST 04, 2023

Applies to:

Oracle WebLogic Server - Version 10.3.5 to 12.1.1.0
Information in this document applies to any platform.

There is a need to specify to use an empty Pollicy Alternative.

For example: allow clients to provide a Saml Token or provide none (Empty Policy Alternative)

Although <wsp:All /> is present, clients who do not provide a Saml Token are being rejected with the following:

Error on verifying message against security policy Error code:1000

new Policy file introduced

The Symptom might be first observed after the Apply or Inclusion of:

<Bug:12598084> - SECURITY HEADERS MISSING - ELEMENT NOT UNDERSTOOD

	To view full details, sign in with your My Oracle Support account.
	Don't have a My Oracle Support account? Click to get started!

In this Document

Symptoms

My Oracle Support provides customers with access to over a million knowledge articles and a vibrant support community of peers and Oracle experts.