OpenSSO Policy Agents incorrectly tokenizes multivalued attributes in OAM 11gR2 PS2 (Doc ID 1959811.1)

Last updated on MARCH 08, 2017

Applies to:

Oracle Access Manager - Version 11.1.2.2.0 and later
Information in this document applies to any platform.

Symptoms

OpenSSO agents incorrectly tokenizes multivalued attributes in R2 PS2

Issue with OAM 11g R2PS2 (OAM 11.1.2.2.0) regarding OpenSSO Agent responses with multivalued attributes

1. Configure multi valued responses with OpenSSO Agents (for example OpenSSO Policy Agent v3.0-02 for WebLogic Server).

For example, Attribute street has two values -

 dc=nprd01,dc=myorg,dc=com
 DC=nprd02,DC=myorg,DC=com

2. Access the protected resources

Expected results: Responses should be displayed correctly.

 dc=nprd01,dc=myorg,dc=com:DC=nprd02,DC=myorg,DC=com

Changes

 We setup a response header as made with a multi-valued attribute like "street" with two values added.

For example, Attribute street has two values -

 dc=nprd01,dc=myorg,dc=com
 DC=nprd02,DC=myorg,DC=com


 But with this, in the headers (cf.--> street Header $user.attr.street ), we can see it as inverted :

 street-response =>  dc=com,DC=myorg,DC=com : dc=nprd01,DC=nprd02,dc=myorg

 or it can read also, with :

 street-response =>  dc=com,DC=com : dc=nprd01,DC=myorg,DC=nprd02,dc=myorg

So,  it is all mixed up. So, all the values seem to be brought.. but not in correct order/formatting values.

Cause

Sign In with your My Oracle Support account

Don't have a My Oracle Support account? Click to get started

My Oracle Support provides customers with access to over a
Million Knowledge Articles and hundreds of Community platforms