Tech Tip : CA Single Sign-On : When trying to create an affiliate domain in FSS UI we cannot as it fails with a popup: "Permission to modify this object was denied."

Document created by Albert_Fernandez Employee on Nov 15, 2017
Version 1Show Document
  • View in full screen mode


We are using FSS UI to administrate SiteMinder and Legacy Federated services in our new Policy Server R12.52 SP2, but when we try to create or manage affiliate domains, we are not able to see them, and when creating we get a popup with the error:

"Permission to modify this object was denied"

Could not save affiliate domain. 

How we can solve this issue? Can we use AdminUI at the same time we are doing changes in FSS UI?


Policy Server R12.52 SP2 CR01 FSS Administrative UI


This issue is fixed in R12.6 release and higher. Please, note that FSS UI is a deprecated tool that should not be used at the same time as AdminUI. FSS UI is also still using legacy model to store objects, so the XPS part of them are created afterwards during maintenance processes. Remember to run XPSSweeper after bringing modifications to the Policy Store objects with FSS UI.