Symantec Access Management

Tech Tip : Problem activating partnership from ADFS Metadata import

  • 1.  Tech Tip : Problem activating partnership from ADFS Metadata import

    Posted Mar 15, 2017 04:04 AM

    Problem

    After importing the Metada file from ADFS, we try to activate the partnership and we get the following error message :

     

    server.log:

     

    ERROR [com.ca.federation.adminui.backingbean.federation.PartnershipListBean]

    (http-pwamhppps04.edev.elabs.eds.com%2F205.239.213.36-8443-3) **ERROR** com.ca.fedxps.api.remote.FedXPSException during UI operation.

    com.ca.fedxps.api.remote.FedXPSException: Activation of partnership failed

     

     

     

    smps.log:

     

    [IdPPartSvc.cpp:2220][createPropertySection][ERROR][sm-xobfed-00310] The failed to create backing object

    [IdPPartSvc.cpp:2575][setActivated][ERROR][sm-xobfed-00490] setActivated failed.

    [PartnershipService.cpp:2286][PartnershipService][ERROR][sm-xobfed-02330] PartnershipService failed. Operation: 3 

     

    How can we solve this ?

    Environment

    Policy Server : 12.52 SP1 CR06 Pstore : Oracle RDBMS

    Cause

    There is a limitation using RDBMS. When activating the partnership we use the following table smproperty5.PROPERTYVALUE VARCHAR2(4000).

    Where there are too much assertion attributes, Policy Server can not insert the data in the table/column and so you cannot activate the partnership

     

    Workaround

    Remove manually all claims that will not be used by ADFS before importing the metadata.

     

    KB: TEC1776544