Oracle Access Manager 11gr2ps3 (OAM 11.1.2.3.x) One Time Password Fails With OAM-02054 SSO Session Creation Failed...AmRuntimeException: LoggedIn User Is Different Than The Existing Session User (Doc ID 2272692.1)

Last updated on JUNE 06, 2017

Applies to:

Oracle Access Manager - Version 11.1.2.3.0 and later
Information in this document applies to any platform.

Symptoms

Oracle Access Manager 11gr2ps3 (OAM 11.1.2.3.x) One Time Password Fails With OAM-02054 SSO Session Creation Failed...AmRuntimeException: LoggedIn User Is Different Than The Existing Session User

OTP login is not working in specific scenario:

1) "OUD Scheme" authLevel=3

2) "OUD Up Scheme", created like a copy from "OUD Scheme", but with authLevel=4

3) "OUD OTP Scheme" autlhLevel=4 and AuthModule=TOTPModule

4) First resource is protected by "OUD Scheme"

5) Second resource protected by "OUD Up Scheme" + "OUD OTP Scheme" as Post-Authentication.

[2017-05-24T11:39:18.234+02:00] [oam_server1] [NOTIFICATION:16] [OAMSSA-22009] [oracle.oam.diagnostic] [tid: [ACTIVE].ExecuteThread: '0' for queue: 'weblogic.kernel.Default (self-tuning)'] [userId: <anonymous>] [ecid: 885163ee18998e32:2ae7d7f:15bfc1e0c45:-8000-00000000001380ca,0] [APP: oam_server#11.1.2.0.0] Registering collector at runtime.
[2017-05-24T11:39:18.234+02:00] [oam_server1] [ERROR] [OAM-02054] [oracle.oam.controller] [tid: [ACTIVE].ExecuteThread: '0' for queue: 'weblogic.kernel.Default (self-tuning)'] [userId: <anonymous>] [ecid: 885163ee18998e32:2ae7d7f:15bfc1e0c45:-8000-00000000001380ca,0] [APP: oam_server#11.1.2.0.0] SSO session creation failed.[[
oracle.security.am.common.utilities.exception.AmRuntimeException: LoggedIn user is different than the existing session user
at oracle.security.am.engines.sso.adapter.MultipleUserSessionAdapterImpl.shouldUpdateOnSubjectValidationFailure(MultipleUserSessionAdapterImpl.java:303)
at oracle.security.am.engines.sso.adapter.AbstractSessionAdapterImpl.createUpdateSession(AbstractSessionAdapterImpl.java:616)
at oracle.security.am.engines.enginecontroller.SSOEngineController.createSession(SSOEngineController.java:3776)
at oracle.security.am.engines.enginecontroller.SSOEngineController.processEvent(SSOEngineController.java:571)
at oracle.security.am.controller.MasterController.processEvent(MasterController.java:596)
at oracle.security.am.controller.MasterController.processRequest(MasterController.java:788)
at oracle.security.am.controller.MasterController.process(MasterController.java:708)
at oracle.security.am.pbl.PBLFlowManager.delegateToMasterController(PBLFlowManager.java:209)
at oracle.security.am.pbl.PBLFlowManager.handleBaseEvent(PBLFlowManager.java:147)
at oracle.security.am.pbl.PBLFlowManager.processRequest(PBLFlowManager.java:107)

..........

[2017-05-24T11:39:18.263+02:00] [oam_server1] [NOTIFICATION:16] [] [oracle.oam.binding] [tid: [ACTIVE].ExecuteThread: '0' for queue: 'weblogic.kernel.Default (self-tuning)'] [userId: <anonymous>] [ecid: 885163ee18998e32:2ae7d7f:15bfc1e0c45:-8000-00000000001380ca,0] [APP: oam_server#11.1.2.0.0] Got Response Handler: oracle.security.am.pbl.protocol.plugin.oam.AMFailureResponseHandler@11d954b
[2017-05-24T11:39:18.263+02:00] [oam_server1] [TRACE:16] [] [oracle.oam.binding] [tid: [ACTIVE].ExecuteThread: '0' for queue: 'weblogic.kernel.Default (self-tuning)'] [userId: <anonymous>] [ecid: 885163ee18998e32:2ae7d7f:15bfc1e0c45:-8000-00000000001380ca,0] [APP: oam_server#11.1.2.0.0] [SRC_CLASS: oracle.security.am.pbl.protocol.plugin.oam.AMFailureResponseHandler] [SRC_METHOD: processResponse] ENTRY
[2017-05-24T11:39:18.263+02:00] [oam_server1] [WARNING] [] [oracle.oam.binding] [tid: [ACTIVE].ExecuteThread: '0' for queue: 'weblogic.kernel.Default (self-tuning)'] [userId: <anonymous>] [ecid: 885163ee18998e32:2ae7d7f:15bfc1e0c45:-8000-00000000001380ca,0] [APP: oam_server#11.1.2.0.0] OAM-02054
[2017-05-24T11:39:18.264+02:00] [oam_server1] [TRACE] [] [oracle.oam.binding] [tid: [ACTIVE].ExecuteThread: '0' for queue: 'weblogic.kernel.Default (self-tuning)'] [userId: <anonymous>] [ecid: 885163ee18998e32:2ae7d7f:15bfc1e0c45:-8000-00000000001380ca,0] [APP: oam_server#11.1.2.0.0] [SRC_CLASS: oracle.security.am.pbl.protocol.plugin.oam.AMFailureResponseHandler] [SRC_METHOD: processResponse] OAM-02054[[
oracle.security.am.common.utilities.exception.AmRuntimeException: OAM-02054
at oracle.security.am.engines.enginecontroller.SSOEngineController.createSession(SSOEngineController.java:3811)
at oracle.security.am.engines.enginecontroller.SSOEngineController.processEvent(SSOEngineController.java:571)
at oracle.security.am.controller.MasterController.processEvent(MasterController.java:596)
at oracle.security.am.controller.MasterController.processRequest(MasterController.java:788)
at oracle.security.am.controller.MasterController.process(MasterController.java:708)
at oracle.security.am.pbl.PBLFlowManager.delegateToMasterController(PBLFlowManager.java:209)
at oracle.security.am.pbl.PBLFlowManager.handleBaseEvent(PBLFlowManager.java:147)
at oracle.security.am.pbl.PBLFlowManager.processRequest(PBLFlowManager.java:107)
at oracle.security.am.pbl.transport.http.AMServlet.handleRequest(AMServlet.java:222)
at oracle.security.am.pbl.transport.http.AMServlet.doPost(AMServlet.java:178)
at javax.servlet.http.HttpServlet.service(HttpServlet.java:727)
at javax.servlet.http.HttpServlet.service(HttpServlet.java:820)
at weblogic.servlet.internal.StubSecurityHelper$ServletServiceAction.run(StubSecurityHelper.java:227)
at weblogic.servlet.internal.StubSecurityHelper.invokeServlet(StubSecurityHelper.java:125)
at weblogic.servlet.internal.ServletStubImpl.execute(ServletStubImpl.java:301)
at weblogic.servlet.internal.TailFilter.doFilter(TailFilter.java:26)
at weblogic.servlet.internal.FilterChainImpl.doFilter(FilterChainImpl.java:60)
at oracle.security.jps.ee.http.JpsAbsFilter$1.run(JpsAbsFilter.java:138)
at java.security.AccessController.doPrivileged(Native Method)
at oracle.security.jps.util.JpsSubject.doAsPrivileged(JpsSubject.java:324)
at oracle.security.jps.ee.util.JpsPlatformUtil.runJaasMode(JpsPlatformUtil.java:464)
at oracle.security.jps.ee.http.JpsAbsFilter.runJaasMode(JpsAbsF

Changes

 

 

 

Cause

Sign In with your My Oracle Support account

Don't have a My Oracle Support account? Click to get started

My Oracle Support provides customers with access to over a
Million Knowledge Articles and hundreds of Community platforms