Authorization Failed Redirects Not Working After Upgrade

(Doc ID 336245.1)

Last updated on MARCH 08, 2017

Applies to:

COREid Access - Version: 7.0.4 to 10.1.4
This problem can occur on any platform.

Symptoms

Authentication failure redirects are not working after upgrade from 6.1.1 to 7.0.4 or 10.1.4.

Changes

7.0.x version introduced a new state called authorization inconclusive if there is no explicit deny rule for a user.

For e.g., a user who is not in the allow list is considered to have "inconclusive" permissions and would not be redirected to authorization failure redirect page. A blank page will be displayed.

Cause

Sign In with your My Oracle Support account

Don't have a My Oracle Support account? Click to get started

My Oracle Support provides customers with access to over a
Million Knowledge Articles and hundreds of Community platforms