HTTPS Traffic Being Redirected To HTTP (Doc ID 2247017.1)

Last updated on JUNE 12, 2017

Applies to:

Oracle Access Manager - Version 11.1.2.3.170117 and later
Information in this document applies to any platform.

Symptoms

On : 11.1.2.3.170117 version, Authentication Engine

ACTUAL BEHAVIOR
---------------
Issue: HTTPS traffic being redirected to HTTP after OAAM install.

Oracle Adaptive Access Manager was recently installed and integrated with Oracle Access Manager and Oracle Identity Manager as per the below deployment guide:
https://docs.oracle.com/cd/E40329_01/doc.1112/e48618/oaam.htm#IMEDG897
This has been observed only recently after the OAAM install.

EXPECTED BEHAVIOR
-----------------------
HTTPS traffic remains HTTPS

STEPS
-----------------------
The issue can be reproduced at will with the following steps:
See the HTTPS to HTTP redirect in the below situations:
1) When access the identity console URL (through Load balancer), it redirects to the OAAM login page but http, which causes a connection error.
2) While authenticating in OAAM login page with username and password, it redirects to the OAAM register questions page but http URL again which causes connection failure
3) After authenticating with OAAM and logging into identity console, when logout is clicked, redirects to http URL which again cause failure.
4) When connecting to the test protected web page ( created for testing as mentioned in deployment guide) , it redirects from https://sso.company.com/oaam_sso.html to http://sso.company.com/oaam_server/login.do , which causes connectivity error.


Cause

Sign In with your My Oracle Support account

Don't have a My Oracle Support account? Click to get started

My Oracle Support provides customers with access to over a
Million Knowledge Articles and hundreds of Community platforms