Oracle Identity Federation (OIF 11.1.2.2.0) - Users Unable to Authenticate, Federation Response is Sending with Two "\\" (Doc ID 1987479.1)

Last updated on JULY 27, 2022

Applies to:

Symptoms

Oracle Identity Federation (OIF 11.1.2.2.0) Users Unable to Authenticate, Federation Response is Sending with Two "\\"

• When user has multiple values in an attribute with comma (,)  separated delimiter federation response is sending with two "\\," values and that is causing the issue to our application which cannot read "\"
• Oracle Access Manager 11gR2PS2 (OAM 11.1.2.2) is implemented by the customer as Identity Provider (IdP).
• Oracle Identity Federation (OIF 11.1.2.2.0) has been configured to send attributes in Assertions to SPs.

Steps to reproduce
-----------------------------
1. Perform IdP or SP initiated SSO with OAM IdP.
2. When prompted for IdP login, login with userid having multiple values for attributes sent with the assertion e.g. givenname.
3. SP generates error.

Example: 

Changes

Cause

My Oracle Support provides customers with access to over a million knowledge articles and a vibrant support community of peers and Oracle experts.