Empty Policy <WSP:ALL/> Does Not Work On WebLogic (Doc ID 1467665.1)

Last updated on MAY 24, 2017

Applies to:

Oracle WebLogic Server - Version 10.3.5 to 12.1.1.0
Information in this document applies to any platform.

Symptoms

There is a need to specify to use an empty Pollicy Alternative. 

For example: allow clients to provide a Saml Token or provide none (Empty Policy Alternative)

 Although <wsp:All /> is present, clients who do not provide a Saml Token are being rejected with the following:

Error on verifying message against security policy Error code:1000

Changes

new Policy file introduced

or

The Symptom might be first observed after the Apply or Inclusion of:

<Bug:12598084> - SECURITY HEADERS MISSING - ELEMENT NOT UNDERSTOOD

Cause

Sign In with your My Oracle Support account

Don't have a My Oracle Support account? Click to get started

My Oracle Support provides customers with access to over a
Million Knowledge Articles and hundreds of Community platforms