My Oracle Support Banner

Oracle Identity Manager (OIM) OIMAuthenticationProvider Weblogic Authentication Module Not Populating OIM Indirect Roles Into weblogic.security.principal.WLSGroupImpl (Doc ID 2854397.1)

Last updated on JULY 26, 2023

Applies to:

Identity Manager - Version 11.1.2.3.0 and later
Information in this document applies to any platform.

Symptoms

The Oracle Identity Manager (OIM) OIMAuthenticationProvider Weblogic Authentication Module does not populate OIM indirectly assigned roles into weblogic.security.principal.WLSGroupImpl.

If the Weblogic authentication module stack is setup such that OIMAuthenticationProvider is set for SUFFICENT and comes before another authentication module which may populate the indirect role assignments (ex: ldap db which is sync'ed with OIM) then the logged in user will not have the indirect roles populated and if logic is built into the authentication process it may fail since the OIM User will not have the indirect roles populated correctly.

Cause

To view full details, sign in with your My Oracle Support account.

Don't have a My Oracle Support account? Click to get started!

In this Document
Symptoms
Cause
Solution
References


My Oracle Support provides customers with access to over a million knowledge articles and a vibrant support community of peers and Oracle experts.