AnsweredAssumed Answered

what is authorizeEx call and what does its different values indicate?

Question asked by SatyendraSingh on Mar 22, 2018

I am getting below error in IDP side FWStrace logs, here we can see authorizeEx call is returning 1 and assertion is not getting generated.

 

[Request to policy server for generating saml2 assertion/artifact based on selected profile. [CHECKPOINT = SSOSAML2_GENERATEASSERTIONORARTIFACT_REQ]]
[03/22/2018][15:20:24][30470][2576021248][10a7ec9b-42137cef-e81d3889-a1c655d8-8552e931-990][SSO.java][processAssertionGeneration][Transient IP check: false]
[03/22/2018][15:20:24][30470][2576021248][10a7ec9b-42137cef-e81d3889-a1c655d8-8552e931-990][SSO.java][processAssertionGeneration][Result of authorizeEx call is: 1.]
[03/22/2018][15:20:24][30470][2576021248][10a7ec9b-42137cef-e81d3889-a1c655d8-8552e931-990][SSO.java][processAssertionGeneration][Received the assertion/artifact response based on profile selected. [CHECKPOINT = SSOSAML2_RECEIVEDASSERTION_RSP]]
[03/22/2018][15:20:24][30470][2576021248][10a7ec9b-42137cef-e81d3889-a1c655d8-8552e931-990][SSO.java][processAssertionGeneration][Transaction with ID: 10a7ec9b-42137cef-e81d3889-a1c655d8-8552e931-990 failed. Reason: FAILED_NO_ATTR_RETURNED]
[03/22/2018][15:20:24][30470][2576021248][10a7ec9b-42137cef-e81d3889-a1c655d8-8552e931-990][SSO.java][processAssertionGeneration][Denying request due to no attribute returned from SAML2 assertion generator.]
[03/22/2018][15:20:24][30470][2576021248][10a7ec9b-42137cef-e81d3889-a1c655d8-8552e931-990][SSO.java][processAssertionGeneration][Sending error for unsolicited response]

Outcomes