OAM IIS 12.2.1.4 WebGate Loops After Session Idle and Token Validity Period Exceeded (Doc ID 2959856.1)

Last updated on OCTOBER 10, 2024

Applies to:

Symptoms

On OAM (Oracle Access Manager) 12.2.1.4 using an IIS (Microsoft Internet Information Service) WebGate specifically, users who have been idle for a long period will encounter a loop after requesting an IIS WebGate protected resource.  The loop has the general pattern of:

1. Resource request
2. Redirected to /oam/server/obrareq.cgi for authentication
3. User authenticates successfully
4. Redirected to /obrar.cgi on the WebGate.  At this point it is noted that the WebGate does not set a new OAMAuthnCookie
5. Redirected to original resource
6. Redirected (again) to /oam/server/obrareq.cgi
7. Redirected back to /obrar.cgi on the WebGate...from this point we loop through steps 5-7 until the request header grows too large for the browser or webserver (due to OAMRequestContextCookeis being set on each loop)

Cause

My Oracle Support provides customers with access to over a million knowledge articles and a vibrant support community of peers and Oracle experts.