Fusion Applications 11.1.1.5.1 Installation Part V – Integrate OIM with OAM

This post covers part V of Fusion Applications 11.1.1.5.1 Installation, Integrate Oracle Identity Manager (OIM) with Oracle Access Manager (OAM) for Fusion Application. For previous steps check below links

OIM/OAM 11g installation and other key tasks required for administrators is also covered in my book

The steps to integrate OIM with OAM are very well documented here so I am going to cover only key points and important things to consider.

1. Creating Client Keystore (SSLClinetConfig.sh) discussed in section 17.1.2  is optional and required only if you configure Fusion Applications to Oracle Identity Management components on SSL (Fusion Applications can be configured to connect to Identity Management with NO SSL)

2. Copying OAM keystore files mentioned in 17.2.2   is required only if OAM Access Server is running in SIMPLE or SECURE mode (OAM Access Server runs in one of three modes – OPEN, SIMPLE, SECURE where OPEN is default mode)

3. For content in file config_oam2.props mentioned in 17.2.3 , note following things

a) Update WLSHOST and WLSPORT to WebLogic Machine Name and WebLogic Admin Server port resp. on which OIM/OAM is deployed (default WebLogic Admin Server port is 7001)

b) Update IDSTORE_HOST and IDSTORE_PORT to OID Server Host and LDAP Port (default OID LDAP port is 3060)

c) For IDSTORE_USERSEARCHBASE, IDSTORE_SEARCHBASE, IDSTORE_GROUPSEARCHBASE – replace dc=mycompany, dc=com with OID security realm value defined during OID Configuration.

d) For PRIMARY_OAM_SERVERS – Server Name and port number are OAM Server Machine and OAM Proxy Port resp. If there is only one OAM Server then defined only one OAMServer:Port (default OAM Proxy port is 5575)

e) OAM11G_IDM_DOMAIN_OHS_HOST : is machine name on which OHS server is going to run for OAM  (If there is load balancer in front of OHS then mention Load Balancer Name here)

f) OAM11G_IDM_DOMAIN_OHS_PORT : is Port Number on which OHS server is going to run for OAM  (If there is load balancer in front of OHS then mention Load Balancer Listen Port here).

g) OAM11G_IDM_DOMAIN_OHS_PROTOCOL : is Protocol for OHS Server (If there is load balancer in front of OHS then mention Load Balancer Protocol here). My OHS server is running on HTTP (No SSL) so I am using value http

h) OAM_TRANSFER_MODE : OAM Access Server can be configured one of three modes OPEN, SIMPLE, CERT (default value OPEN), change value as per OAM Server configuration. (Use value in upper case else some of OIM/OAM integration tasks will fail. This is BUG where value in lowercase result in issues during integration)

i) OAM11G_OAM_SERVER_TRANSFER_MODE : same as defined above

j) COOKIE_DOMAIN : change this to your primary domain.

k) OAM11G_SERVER_LBR_HOST, OAM11G_SERVER_LBR_PORT, OAM11G_SERVER_LBR_PROTOCOL : Change values as per your Load Balancer Configuration (If you do not have load balancer in front of OHS then use OHS hostname, OHS Port and OHS Protocol)

l) OAM11G_OIM_OHS_URL : Change it to load balancer protocol://hostname:port (If you do not have load balancer in front of OHS then use OHS hostname, OHS Port and OHS Protocol. I am using value like http://innowave12.com:7780)

4. For content in file user.props mentioned in 17.2.4 , note following things

a) Update IDSTORE_HOST and IDSTORE_PORT to OID Server Host and LDAP Port (default OID LDAP port is 3060)

b) For IDSTORE_USERSEARCHBASE and IDSTORE_GROUPSEARCHBASE – replace dc=mycompany, dc=com with OID security realm value defined during OID Configuration.

5. For content in file oimitg.props mentioned in 17.2.5.2 note following things

a) For ACCESS_SERVER_HOST and ACCESS_SERVER_PORT – Server Name and port number are OAM Server Machine and OAM Proxy Port resp. If there are multiple OAM Servers in cluster then use any one OAMServer:Port (default OAM Proxy port is 5575)

b) COOKIE_DOMAIN : change this to your primary domain.

c) OAM_TRANSFER_MODE : OAM Access Server can be configured one of three modes OPEN, SIMPLE, CERT (default value OPEN), change value as per OAM Server configuration. (Use value in upper case else some of OIM/OAM integration tasks will fail. This is BUG where value in lowercase result in issues during integration)

d) Update IDSTORE_HOST and IDSTORE_PORT to OID Server Host and LDAP Port (default OID LDAP port is 3060)

e) For IDSTORE_ADMIN_USER, IDSTORE_USERSEARCHBASE and IDSTORE_GROUPSEARCHBASE – replace dc=mycompany, dc=com with OID security realm value defined during OID Configuration.

f) For MDS_DB_URL : replace RAC Database Hostname and Port as per your OID database. If OIM database is configured in Single Node Database then use entry like  jdbc:oracle:thin:@(DESCRIPTION=(ADDRESS_LIST=(ADDRESS=(protocol=tcp)(host=innowave12.com)(port=1521))(ADDRESS=(protocol=tcp)))(CONNECT_DATA=(SERVER=DEDICATED)(SERVICE_NAME=faidm.com)))

g) Update MDS_DB_SCHEMA_USERNAME to OIM MDS schema

h) Update WLSHOST and WLSPORT to WebLogic Machine Name and WebLogic Admin Server port resp. on which OIM/OAM is deployed (default WebLogic Admin Server port is 7001)

i) DOMAIN_NAME : WebLogic Domain Name of OIM/OAM Server

j) OIM_MANAGED_SERVER_NAME : is name of OIM managed Server (default value oim_server1)

k) DOMAIN_LOCATION : update location where OIM/OAM WebLogic Domain is configured

6. Updating OVD Authenticator as mentioned in 17.2.6  is required only if you are using OVD (If you are not using OVD then skip this step)

7. Creating CSF keys as mentioned in 17.2.7  is required only if OAM is configured in SIMPLE or CERT mode (default OAM modes is OPEN)

8. Task mention in 17.3  and 17.4 are NOT required for Fusion Apps installation.

9. After chapter 17, install Oracle HTTP Server (OHS) and configured WebGate as defined in section 18.5

10. Validate that you can login to OIM via OHS using OAM Single Sign-On (more on how to validate and screen you should for OIM login in next port )

Share This Post with Your Friends over Social Media!

About the Author Atul Kumar

Oracle ACE, Author, Speaker and Founder of K21 Technologies & K21 Academy : Specialising in Design, Implement, and Trainings.

follow me on:

Leave a Comment:

29 comments
Paul says February 7, 2012

Hi Atul,

I had a question on OIM/OAM integration, is it possible to keep OAM and OIM in separate domains and still have the password use cases work?

Thanks

Reply
Atul Kumar says February 7, 2012

@ Paul,
Though I have not tried myself but this should work as long as LDAPSync works and OIM is using same OID(LDAP) as used by OAM for authentication.

Reply
Paul says February 8, 2012

Thanks Atul.

I just tried out the 2 domain scenario and it does work.

Reply
Atul Kumar says February 14, 2012

@Paul,
Thanks for sharing this information

Reply
Mohan says February 15, 2012

I am sorry Atul for bugging you,

When can I expect rest of the installation process as I am closely following your steps and just finished this part.

you really making my life easy.

Thank you very much,

Reply
praveen sharma says February 16, 2012

IDM environment admin server losses connectivity with cluster managed servers

Reply
Atul Kumar says February 17, 2012

@ Mohan,
I am current busy on other project so expect next post on FA by 25/26 feb. I’ll try to be regular in march

Reply
Mohan says March 6, 2012

while I was doing ‘ 17.2.5.2’ part i got error after running the following setup.

idmConfigTool.sh -configOIM input_file=oimitg.props

i am seeing following error in automation.log..

MDS DB Config- { (MDS DB Url,jdbc:oracle:thin:@infusionida01.noetix.local:1522:IDMDB) (MDS DB Schema Username,DEV_MDS) }
Mar 5, 2012 2:06:41 PM oracle.iam.sso.config.io.MsgLogger logInfo
INFO: Starting initialization of MDS resources
Mar 5, 2012 2:06:46 PM oracle.iam.sso.config.io.MsgLogger logError
SEVERE: Error uploading notification handlers to mds db
Mar 5, 2012 2:06:46 PM oracle.iam.sso.config.io.MsgLogger logError
ALL: Error uploading notification handlers to mds db
oracle.mds.exception.MDSRuntimeException: MDS-00003: error connecting to the database
Unable to start the Universal Connection Pool: oracle.ucp.UniversalConnectionPoolException: Error during pool creation in Universal Connection Pool Manager MBean: oracle.ucp.UniversalConnectionPoolException: Error during pool creation in Universal Connection Pool Manager: java.sql.SQLException: Invalid Universal Connection Pool configuration: java.sql.SQLException: Unable to create factory class instance with provided factory class name: java.lang.ClassNotFoundException: oracle.jdbc.pool.OracleDataSource
Error during pool creation in Universal Connection Pool Manager MBean: oracle.ucp.UniversalConnectionPoolException: Error during pool creation in Universal Connection Pool Manager: java.sql.SQLException: Invalid Universal Connection Pool configuration: java.sql.SQLException: Unable to create factory class instance with provided factory class name: java.lang.ClassNotFoundException: oracle.jdbc.pool.OracleDataSource
at oracle.mds.internal.persistence.db.fcf.ConnectionManagerCallback.(ConnectionManagerCallback.java:77)
at oracle.mds.persistence.stores.db.DBMetadataStore.checkRepositoryCompatibility(DBMetadataStore.java:875)
at oracle.mds.persistence.stores.db.DBMetadataStore.checkCompatibility(DBMetadataStore.java:1140)
at oracle.mds.persistence.stores.db.DBMetadataStore.(DBMetadataStore.java:424)
at oracle.mds.persistence.stores.db.DBMetadataStore.(DBMetadataStore.java:376)
at oracle.iam.sso.config.MdsHandler.initialize(MdsHandler.java:94)
at oracle.iam.sso.config.MdsHandler.transferToDBStore(MdsHandler.java:132)
at oracle.iam.sso.config.OimCfgTool.importNotificationHandlers(OimCfgTool.java:155)
at sun.reflect.NativeMethodAccessorImpl.invoke0(Native Method)
at sun.reflect.NativeMethodAccessorImpl.invoke(NativeMethodAccessorImpl.java:39)
at sun.reflect.DelegatingMethodAccessorImpl.invoke(DelegatingMethodAccessorImpl.java:25)
at java.lang.reflect.Method.invoke(Method.java:597)
at oracle.idm.automation.impl.oim.handlers.OIMIntegrationHandler.invokeOIMConfigTool(OIMIntegrationHandler.java:314)
at oracle.idm.automation.impl.oim.handlers.OIMIntegrationHandler.performConfigOIMOperations(OIMIntegrationHandler.java:153)
at oracle.idm.automation.impl.oim.handlers.OIMIntegrationHandler.execute(OIMIntegrationHandler.java:127)
at oracle.idm.automation.AutomationTool.executeOIMOperation(AutomationTool.java:631)
at oracle.idm.automation.AutomationTool.configOIM(AutomationTool.java:623)
at oracle.idm.automation.AutomationTool.parseCmdLine(AutomationTool.java:223)
at oracle.idm.automation.AutomationTool.main(AutomationTool.java:133)
Caused by: java.sql.SQLException: Unable to start the Universal Connection Pool: oracle.ucp.UniversalConnectionPoolException: Error during pool creation in Universal Connection Pool Manager MBean: oracle.ucp.UniversalConnectionPoolException: Error during pool creation in Universal Connection Pool Manager: java.sql.SQLException: Invalid Universal Connection Pool configuration: java.sql.SQLException: Unable to create factory class instance with provided factory class name: java.lang.ClassNotFoundException: oracle.jdbc.pool.OracleDataSource
at oracle.ucp.util.UCPErrorHandler.newSQLException(UCPErrorHandler.java:488)
at oracle.ucp.util.UCPErrorHandler.throwSQLException(UCPErrorHandler.java:163)
at oracle.ucp.jdbc.PoolDataSourceImpl.startPool(PoolDataSourceImpl.java:651)
at oracle.ucp.jdbc.PoolDataSourceImpl.getConnection(PoolDataSourceImpl.java:890)
at oracle.ucp.jdbc.PoolDataSourceImpl.getConnection(PoolDataSourceImpl.java:857)
at oracle.ucp.jdbc.PoolDataSourceImpl.getConnection(PoolDataSourceImpl.java:851)
at oracle.mds.internal.persistence.db.JDBCConnectionManagerImpl.fetchConnection(JDBCConnectionManagerImpl.java:174)
at oracle.mds.internal.persistence.db.ConnectionManager.getConnection(ConnectionManager.java:347)
at oracle.mds.internal.persistence.db.fcf.ConnectionManagerCallback.(ConnectionManagerCallback.java:49)
at oracle.mds.persistence.stores.db.DBMetadataStore.checkRepositoryCompatibility(DBMetadataStore.java:875)
at oracle.mds.persistence.stores.db.DBMetadataStore.checkCompatibility(DBMetadataStore.java:1140)
at oracle.mds.persistence.stores.db.DBMetadataStore.(DBMetadataStore.java:424)
at oracle.mds.persistence.stores.db.DBMetadataStore.(DBMetadataStore.java:376)
at oracle.iam.sso.config.MdsHandler.initialize(MdsHandler.java:94)
at oracle.iam.sso.config.MdsHandler.transferToDBStore(MdsHandler.java:132)
at oracle.iam.sso.config.OimCfgTool.importNotificationHandlers(OimCfgTool.java:155)
at sun.reflect.NativeMethodAccessorImpl.invoke0(Native Method)
at sun.reflect.NativeMethodAccessorImpl.invoke(NativeMethodAccessorImpl.java:39)
at sun.reflect.DelegatingMethodAccessorImpl.invoke(DelegatingMethodAccessorImpl.java:25)
at java.lang.reflect.Method.invoke(Method.java:597)
at oracle.idm.automation.impl.oim.handlers.OIMIntegrationHandler.invokeOIMConfigTool(OIMIntegrationHandler.java:314)
at oracle.idm.automation.impl.oim.handlers.OIMIntegrationHandler.performConfigOIMOperations(OIMIntegrationHandler.java:153)
at oracle.idm.automation.impl.oim.handlers.OIMIntegrationHandler.execute(OIMIntegrationHandler.java:127)
at oracle.idm.automation.AutomationTool.executeOIMOperation(AutomationTool.java:631)
at oracle.idm.automation.AutomationTool.configOIM(AutomationTool.java:622)
… 2 more
Caused by: oracle.ucp.UniversalConnectionPoolException: Error during pool creation in Universal Connection Pool Manager MBean: oracle.ucp.UniversalConnectionPoolException: Error during pool creation in Universal Connection Pool Manager: java.sql.SQLException: Invalid Universal Connection Pool configuration: java.sql.SQLException: Unable to create factory class instance with provided factory class name: java.lang.ClassNotFoundException: oracle.jdbc.pool.OracleDataSource
at oracle.ucp.util.UCPErrorHandler.newUniversalConnectionPoolException(UCPErrorHandler.java:368)
at oracle.ucp.util.UCPErrorHandler.throwUniversalConnectionPoolException(UCPErrorHandler.java:49)
at oracle.ucp.util.UCPErrorHandler.throwUniversalConnectionPoolException(UCPErrorHandler.java:80)
at oracle.ucp.admin.UniversalConnectionPoolManagerMBeanImpl.createConnectionPool(UniversalConnectionPoolManagerMBeanImpl.java:316)
at oracle.ucp.jdbc.PoolDataSourceImpl.startPool(PoolDataSourceImpl.java:625)
… 24 more

please let me know if I am missing anything here also find my oimitg.props like below..

LOGINURI: /${app.context}/adfAuthentication
LOGOUTURI: /oamsso/logout.html
AUTOLOGINURI: None
ACCESS_SERVER_HOST: infusionappa01.noetix.local
ACCESS_SERVER_PORT: 5575
ACCESS_GATE_ID: Webgate_IDM
COOKIE_DOMAIN: .noetix.local
COOKIE_EXPIRY_INTERVAL: 120
OAM_TRANSFER_MODE: OPEN
WEBGATE_TYPE: ohsWebgate10g
SSO_ENABLED_FLAG: true
IDSTORE_PORT: 3060
IDSTORE_HOST: infusionappa01.noetix.local
IDSTORE_DIRECTORYTYPE: OID
IDSTORE_ADMIN_USER: cn=oamLDAP,cn=Users,dc=noetix,dc=local
IDSTORE_USERSEARCHBASE: cn=Users,dc=noetix,dc=local
IDSTORE_GROUPSEARCHBASE: cn=Groups,dc=noetix,dc=local
MDS_DB_URL: jdbc:oracle:thin:@(DESCRIPTION=(ADDRESS_LIST=(ADDRESS=(protocol=tcp)(host=infusionida01.noetix.local)(port=1522))(ADDRESS=(protocol=tcp)))(CONNECT_DATA=(SERVER=DEDICATED)(SERVICE_NAME=IDMDB.noetix.local)))
MDS_DB_SCHEMA_USERNAME: DEV_MDS
WLSHOST: infusionappa01.noetix.local
WLSPORT: 7001
WLSADMIN: weblogic
DOMAIN_NAME: IDMDomain
OIM_MANAGED_SERVER_NAME: oim_server1
DOMAIN_LOCATION: /d01/Oracle/Middleware/user_projects/domains/IDMDomain

Reply
Atul Kumar says March 6, 2012

@ mohan
Yes I think I had this error in past.

Please confirm that you created wlfullclient.jar on OIM before running above command

Reply
Mohan says March 6, 2012

I didn’t remember that, I ran that, as I followed exactly your steps 🙂

thank you very much for your quick reply

Reply
Mohan says March 6, 2012

how to create wlfullclient.jar on OIM, I think I didn’t did this step.

Reply
Mohan says March 6, 2012

should I do the following steps to create that jar file

4.6.4 Creating the wlfullclient.jar File
Oracle Identity Manager uses the wlfullclient.jar library for certain operations.
Oracle does not ship this library, so you must create this library manually. Oracle
recommends creating this library under the MW_HOME/wlserver_
10.3/server/lib directory on all the machines in the application tier of your
environment. You do not need to create this library on directory tier machines such as
OIDHOST1, OIDHOST2, OVDHOST1 and OVDHOST2.
Follow these steps to create the wlfullclient.jar file:
1. Navigate to the MW_HOME/wlserver_10.3/server/lib directory
2. Set your JAVA_HOME environment variable and ensure that the JAVA_HOME/bin
directory is in your path.
3. Create the wlfullclient.jar file by running:
java -jar wljarbuilder.jar

please confirm.

Reply
Mohan says March 6, 2012

Hi Atul,

Thank you very much for your solution. it fixed my problem after creating wlfullclient.jar file.

even I know that you are busy with other things because of my urgent requirment I am asking you again

when can I expect rest of the fusion Installtion.

Reply
Vijay says March 16, 2012

Hi Atul

I am inatalling the OIM for Fusion application and following the

Oracle® Fusion Middleware
Enterprise Deployment Guide for Oracle Identity Management
(Oracle Fusion Applications Edition)
11g Release 1 (11.1.1.5.0)
E21032-01

As per guide after completing the chapter 13 SOA log giving the error

can you tell me Authentication provider are required in weblogiic domain

Reply
Atul Kumar says March 16, 2012

@ Vijay,
Please share issue and error message you are hitting in SOA

Reply
sk says August 25, 2012

Hi! Atul,

I have installed and configured the entire Identity Management 11.1.1.5.

The only steps remaining are:
Testing connection to OAM
Integrating OAM and OIM
My oamtest.jar is failing with the following error.
[8/25/12 1:10 PM][request][connect] no
[8/25/12 1:10 PM][response] Connection to access server not available

Kindly assist.

Reply
    Atul Kumar says August 28, 2012

    @ SK,
    What proxy port OAM server is running (5575 is default port for OAM), check under deployments in WebLogic console and ensure that application oam_server (or something similar) is up and running. Ensure that OAM managed server is up and running without any errors.

    Reply
sk says August 25, 2012

Hi! Atul

When I try post-install steps of 12961473 for OIM I get the following error. Kindly suggest.

E:\lapps\oracle\product\fmw\iam\server\bin>patch_weblogic.bat
else( was unexpected at this time.
E:\lapps\oracle\product\fmw\iam\server\bin>

Reply
    Atul Kumar says August 28, 2012

    @ SK,
    BP03 is latest where as above patch is BP01 , any reason for applying old patch ?

    Check if patch_weblogic.bat is one that comes with patch (check timestamp of this file) .

    Raise an SR with Oracle Support

    Reply
» Forgot Password link on OAM Login Page Online Apps DBA: One Stop Shop for Apps DBA’s says September 18, 2012

[…] you integrate OAM with OIM (more here ). You see three links “Forgot Password” , “Register New […]

Reply
ram says October 1, 2012

Hi Atul,

Please help me with the below error.
I have configired IDM sucessfully but when i have installed webgate and connecting to OIM..i am getting below error in log and not able to run the schedule jobs in OIM.
Error:
This operation cannot be performed because the Scheduler Service is not in Started state.

and OIM log file:

and below is the admin log:

Oct 1, 2012 4:05:34 PM oracle.iam.platform.auth.providers.wls.OIMSignatureLoginModule login
SEVERE: oracle.iam.platform.auth.providers.wls.OIMSignatureLoginModule login() Invalid Input username/password
Oct 1, 2012 4:05:34 PM oracle.iam.platform.auth.impl.DBStore initializeDataSource
INFO: Pool data source initialized successfully

Please help with this error.

Reply
Anonymous says December 11, 2012

Do you have any post on OAM/OAAM integrattion? I have integrated OAM and OAAM and can see the oaam login page but everytime I try to login it keeps saying “Sorry, the identification you entered was not recognized. Please try again”
Also, I dont see any authentication requests going to my ldap which is OUD.
“OAM Tap token not found in request parameter” is also logged when I try to hit the protected resource on OHS 11g webgate.
Any help would be appreciated.

Reply
Anonymous says December 11, 2012

Yes, I am using TAP scheme. OAM/OAAM versions are 11.1.2 and OHS webgate 11g.
Requests are not going to OAM server. But when i check the properties on oaam admin console, host port and webgate name seems to be correct.

What are these properties for?
oaam.uio.oam.password
oaam.uio.oam.user

They are blank in OAAM admin console.

Reply
Navi says August 29, 2013

Hi Atul,

Can you please help me on the below issue :
We integrated OIM with OAM in 11gR2. While logging in to SSO application protected by OAM, We are redirecting to OIM first login screen. On that screen we are entering new password and answering challenge questions. But when we click on submit, It is not landing to SSP Application landing page. It is showing us the OAM Error page(System Error page). and on the browser we see the URL redirected upto below and failing to redirect to app home page. Here is the URL which we see in browser:

http://:14100/oam/server/dap/cred_submit?oam_tap_token=v2.0~OIMPartner~NEVGMTkwQjRCREIxQTgyM0MyQ0QyRX5EMTEwODk3MThEMkE0MTZBNjUzMzMxODJGMkQ5QzQ5ND……

but when we close browser and login to application with new password, we are able to login. Can you please help us what could be the issue?

Thanks
Navi

Reply
    Atul Kumar says August 30, 2013

    @ Navi,
    Is this just OAM & OIM or OAAM as well ? Check error in OAM managed server log file.

    Reply
Navi says August 30, 2013

Hi Atul,

This is just OIM and OAM integration. we dont have OAAM integrated in this environment. Also I couldn’t see any kind of error in oam_server1.log file when I am getting this error

But i do see this in oam_server1-diagnostic.log in TRACE:32 level. In the below logs, It is looking at IAMSuiteagent on port 80. But in our environment, we created one more webgate with new host identifier(contains preferred host like IAMSuiteAgent11g) and on different port 7777 due to some issue. And we updated these details in oam.props file and oim.props file and ran IDMConfigTool.bat one more time. But I am not able to understand why it is still looking at old IAMSuiteAgent on port 80

[2013-08-30T04:22:38.898-07:00] [oam_server1] [TRACE] [] [oracle.oam.controller] [tid: [ACTIVE].ExecuteThread: ‘5’ for queue: ‘weblogic.kernel.Default (self-tuning)’] [userId: ] [ecid: ffdce911f1f8eddd:-28fef2bf:140cd70886d:-8000-000000000000172e,0] [SRC_CLASS: oracle.security.am.controller.util.CookieCacheHandler] [APP: oam_server#11.1.2.0.0] [SRC_METHOD: readFromStore] Cached Data Local Session Store data str:null
[2013-08-30T04:22:38.898-07:00] [oam_server1] [TRACE:16] [] [oracle.oam.controller] [tid: [ACTIVE].ExecuteThread: ‘5’ for queue: ‘weblogic.kernel.Default (self-tuning)’] [userId: ] [ecid: ffdce911f1f8eddd:-28fef2bf:140cd70886d:-8000-000000000000172e,0] [SRC_CLASS: oracle.security.am.controller.util.CookieBasedTransportStore] [APP: oam_server#11.1.2.0.0] [SRC_METHOD: getAttribute] ENTRY
[2013-08-30T04:22:38.898-07:00] [oam_server1] [TRACE:16] [] [oracle.oam.controller] [tid: [ACTIVE].ExecuteThread: ‘5’ for queue: ‘weblogic.kernel.Default (self-tuning)’] [userId: ] [ecid: ffdce911f1f8eddd:-28fef2bf:140cd70886d:-8000-000000000000172e,0] [SRC_CLASS: oracle.security.am.controller.util.CookieCacheHandler] [APP: oam_server#11.1.2.0.0] [SRC_METHOD: readFromStore] RETURN null
[2013-08-30T04:22:38.898-07:00] [oam_server1] [TRACE:16] [] [oracle.oam.controller] [tid: [ACTIVE].ExecuteThread: ‘5’ for queue: ‘weblogic.kernel.Default (self-tuning)’] [userId: ] [ecid: ffdce911f1f8eddd:-28fef2bf:140cd70886d:-8000-000000000000172e,0] [SRC_CLASS: oracle.security.am.controller.util.CookieCacheHandler] [APP: oam_server#11.1.2.0.0] [SRC_METHOD: addToStore] ENTRY [{stringMap=[{oam_tap_token=v2.0~OIMPartner~NEVEN0M5Nzc1OUNFRDYzQzQ0MUIyNn4wOTY1QjMyNTRBQkMyMEJCNUFFMUI1NEMwNEIxMUVFQjMxNUEzM0U2fjlDQ0NDM0E3QkYxNUExRkZGNDFERjFCNzg5Q0M1RTU1fkUzRjQ5NTE1MjM4OUM3NURBMTZCQzA5Njg4OUU4Q0U4QUM4MTg5MkYyODg2Rjc5NzVCN0YwOEY3OTQ3NjZENzNDMENFODY1Rjk2NjFFRjM3M0ZFRTc0MkU1OUNDMDRDMzNGODlBQzM1QTBCMjVEMEU4MTMwMjI4RDE0NDMzRjM3QzczODdEMEM1MDEyMTFCMEU0RkU3RDM5NDhEOTNDOUUwNEE3MDY2MkJGNENFQ0Y4OTBFMzU5RjI1QkNDREVGNEFENEVDNUI0RkRCOUZCOUVCODdERUMwOUY3N0I0RTRFNDFERkREOEI3NTJBOTYyMjY1Q0I2MUM2QTA0OEJGNjI=}{Cookie=JSESSIONID=NKKGS… OAM_REQ=invalid}{baseEvent=dap_assert_creds}{Host=oam.company.com:14100}{DAP_FLOW=DAP_OIF_INIT}{User-Agent=Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/29.0.1547.57 Safari/537.36}{Connection=keep-alive}{p_error_code=}{TAPPartnerId=OIMPartner}{Accept-Language=en-US,en;q=0.8}{authn_try_count=null}{Referer=http://sso.company.com:7777/identity/faces/firstlogin?backUrl=http%3A%2F%2Fapp.company.com%3A80%2F&_afrWindowMode=0&checksum=A696EDCC5DEF595D04F6594B30345885986C0B8BA9DD02464BB93E03AF08A5B3&_afrLoop=912448626723787&_adf.ctrl-state=dfeqzsbzc_4}{Accept-Encoding=gzip,deflate,sdch}{creationTime=0}{Accept=text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8}]}{objectMap={redirect_url=/pages/servererror.jsp, resource_id=Type: HTTP Operation: view Name: DAPResource URL: /oamTAPResponseAssertResource Host: IAMSuiteAgent Port: 80, SSORequestToken=null, IdContextClaims={}, REDIRECT_URL=Base Url: http://myportal-fqa.hotelgroup.com:80/, Length: 38, eventFlowControllerStack=ssoFlowController,, audit_context=oracle.security.jps.service.audit.AuditContext@5694bcbb, tap_req_attr={}, credential=Credentials keys:[daptoken, tap_token_body], eventStack=dap_assert_creds : is_resource_protected : }}]

Reply
vinaykalyan says March 26, 2014

Hi Atul

Any response for Navi’s question? I am also getting same error.

Reply
Add Your Reply