Empty Policy <WSP:ALL/> Does Not Work On WebLogic
Last updated on MAY 24, 2017
Applies to:Oracle WebLogic Server - Version 10.3.5 to 188.8.131.52
Information in this document applies to any platform.
There is a need to specify to use an empty Pollicy Alternative.
For example: allow clients to provide a Saml Token or provide none (Empty Policy Alternative)
Although <wsp:All /> is present, clients who do not provide a Saml Token are being rejected with the following:
Error on verifying message against security policy Error code:1000
new Policy file introduced
The Symptom might be first observed after the Apply or Inclusion of:
<Bug:12598084> - SECURITY HEADERS MISSING - ELEMENT NOT UNDERSTOOD
Sign In with your My Oracle Support account
Don't have a My Oracle Support account? Click to get started
My Oracle Support provides customers with access to over a
Million Knowledge Articles and hundreds of Community platforms