SPNEGO/Kerberos SSO does not Work with Weblogic 12.2.1.2 But it Works Fine on 10.3.6 (Doc ID 2279014.1)

Last updated on JUNE 27, 2017

Applies to:

Oracle WebLogic Server - Version 12.2.1.2.0 and later
Information in this document applies to any platform.

Symptoms

When using SingleSignOn (SPNEGO/Kerberos) with Weblogic 12.2.1.2 on Windows 2008R2 and IE 11 browser as a client, instead of the application page, the login window is coming up. It fails at the beginning browser Request (KRB_AP_REQ/401), and no error is observed on the log file

When enabling Security ATN debug, the following messages are observed on log files but no errors:

 The same configuration works fine with WLS 10.3.6

Changes

 

Cause

Sign In with your My Oracle Support account

Don't have a My Oracle Support account? Click to get started

My Oracle Support provides customers with access to over a
Million Knowledge Articles and hundreds of Community platforms