Oracle Access Manager (OAM) Federation Loop On Authentication In A Stepup Flow (Doc ID 2970020.1)

Last updated on AUGUST 24, 2023

Applies to:

Symptoms

Stepup authentication for federated resource fails and a loop is observed on the login page.

• Oracle Access Manager (OAM) acting as the Identity Provider (IdP) and as a federated proxy

Scenario

Integrated two external SAML identity providers. The authentication levels of the authentication schemes created for these identity providers have been set to 2 and 3 respectively. This allows user with the higher authentication level identity provider to access all parts of the application while the users from the lower level 2 identity provider can only access selected url parts of the application.

• This logic works in OAM 11.1.2.3.x
• This logic does not work in OAM 12.2.1.4.211014 (BP08) Access Server or higher
  • No specific error is observed in the log

Changes

Cause

My Oracle Support provides customers with access to over a million knowledge articles and a vibrant support community of peers and Oracle experts.