Symantec Access Management

  • Private Community

  • 1.  Siteminder Affliate Domin - Unable to Delete from FSSUI

    Posted Sep 12, 2016 09:13 AM

    Hi All,

     

    I am trying to delete Siteminder Legacy Affiliate Domain using FSSUI.

     

    I have 5 service provider objects in that domain. What I am doing is deleting the SP objects one by one and delete the domain finally. i am able to delete 2 SP objects but for other 3 objects it thows the below error.

     

    "Incomplete SAML Service Provider; it may be updated by others, please refresh your cache!  (domain name).

     

    Environment:

     

    R12SP3 PS

    R12 Policy store

     

    As it says cache refresh, I have restarted the PS and tried but no luck.

     

    Anyone faced similar issue? Any idea?



  • 2.  Re: Siteminder Affliate Domin - Unable to Delete from FSSUI

    Broadcom Employee
    Posted Sep 12, 2016 03:40 PM

    12sp3 Policy Server/FSS UI is currently not supported any longer.

    Are you able to reproduce the issue on 12.5 or higher FSSUI or Adminui?

    If so, please open a case so we can investigate further.



  • 3.  Re: Siteminder Affliate Domin - Unable to Delete from FSSUI
    Best Answer

    Broadcom Employee
    Posted Sep 13, 2016 12:02 PM

    Hi Saravanan,

     

    If all attempts from FSSUI fails, you could still try to delete them from WAM UI.

    If WAM UI fails, then try XPSExplorer command line tool.

    However, you should have policy store backed up first in case data corruption happens when using XPSExplorer to remove any store objects. This is small risk that siteminder admin has to consider.

     

    When you go over these steps, repeatedly running XPSSweeper from time to time.

    R12 version is known to have objects not linked or synced immediately while UI changes are happening, XPSSweeper can mitigate to some degree.  R12.52 or later release will improve this feature much better.

     

    Hope this help.

     

    Thanks,

     

    Hongxu