Oracle Access Manager (OAM 11g) Intermittent Looping Issue, Logs Show…EXCEPTION WHILE DECRYPTING TOKEN (Doc ID 1515212.1)

Last updated on MARCH 08, 2017

Applies to:

Oracle Access Manager - Version 11.1.1.5.0 and later
Information in this document applies to any platform.

Symptoms

Two OAM Managed servers running in a WLS cluster. 

Seeing intermittent looping issue (mostly during loadrunner baseline test), the OAM SSO Login page appears correctly, user submits the credentials and OAM sets to obSSO cookie and calls accessgate application to establish e-business session.
The looping happens at this stage, the accessgate application could not create the eBS session and returns to OAM for reauthentication.
OAM responds that user is already authenticated and the loop keep on going.

When Looping happens, here is the flow after user pass the credentials

 
Note: OAM tries to authenticate but return the response to AccessGate load balanced application that user is already authenticated... http://hostname.domain:port/ebsauth_cplnft02/ssologin

Note: AccessGate load balanced application is unable to create a jSession cookie for this user and the loop continues...http://hostname.domain:port/oam/server/obrareq.cgi?wh%3Dcplnft02_HostId%20wu%3D%2Febsauth_cplnft02%2Fssologin%20wo%3D1%20rh%3Dhttp%3A%2F%2Fjlp-partnerlinklogin-cplnft01.johnlewis.co.uk%20ru%3D%252Febsauth_cplnft02%252Fssologin"


When there is no looping, the re-direction steps look like below..
http://hostname.domain:port/oam/server/auth_cred_submit
http://hostname.domain:port/obrar.cgi
http://hostname.domain:port/ebsauth_cplnft02/ssologin

Note: Load Balanced Accessgate application able to establish jsession for eBS and user sees the eBS Homepage.
http://hostname.domain:port/OA_HTML/OA.jsp?OAFunc=OAHOMEPAGE
http://hostname.domain:port/jlpportal

Cause

Sign In with your My Oracle Support account

Don't have a My Oracle Support account? Click to get started

My Oracle Support provides customers with access to over a
Million Knowledge Articles and hundreds of Community platforms