PH00650: IMPLEMENTING MFA RESULTS IN ASSET OR COMMUNITY URL NOT REDIRECTING

Rational Asset Manager 7.5.4
Rational Asset Manager 7.5.4.1
Rational Asset Manager 7.5.4.2
Rational Asset Manager 7.5.4.3
Rational Asset Manager 7.5.4.4
Rational Asset Manager 7.5.4.5
Rational Asset Manager 7.5.4.6
Rational Asset Manager 7.5.4.7

APAR status

• Closed as program error.

Error description

• In IBM Rational Asset Manager (RAM), after you implement
  multi-factor authentication (MFA), and then click any direct
  community or asset or community URL, the MFA is initiated, but
  the source URL redirection results in a blank page or an error.
  
  Accessing a community URL directly without logging into RAM
  throws a blank page, while it should redirect to login/MFA and
  then open community URL.
  
  Accessing assets URL directly without logging into RAM,
  redirects to MFA and then throws an "Asset with internal ID null
  not found" error message.
  

Local fix

• There is no workaround.
  

Problem summary

• ****************************************************************
  * USERS AFFECTED:                                              *
  * RAM 7533 with SAML ennoblement                               *
  ****************************************************************
  * PROBLEM DESCRIPTION:                                         *
  * In IBM Rational Asset Manager (RAM), after you implement     *
  * multi-factor authentication (MFA), and then click any direct *
  * community or asset or community URL, the MFA is initiated,   *
  * but the source URL redirection results in a blank page or an *
  * error.                                                       *
  *                                                              *
  * Accessing a community URL directly without logging into RAM  *
  * throws a blank page, while it should redirect to login/MFA   *
  * and                                                          *
  * then open community URL.                                     *
  *                                                              *
  * Accessing assets URL directly without logging into RAM,      *
  * redirects to MFA and then throws an "Asset with internal ID  *
  * null                                                         *
  * not found" error message.                                    *
  ****************************************************************
  * RECOMMENDATION:                                              *
  ****************************************************************
  

Problem conclusion

• Fixed on 754.
  Community URL issue is a configuration issue.
  Steps to fix Community URL issue:
  1. Login to Websphere IBM console.
  2. Goto Security tab. Navigate to
  Global security > Trust association > Interceptors >
  com.ibm.ws.security.web.saml.ACSTrustAssociationInterceptor
  3. append |ram/communities/index.faces"sso_1.sp.filter
  configuration to sso_1.sp.filter
  
  After 754, User can asses Asset URL directly with out any issue.
  

Temporary fix

Comments

APAR Information

• APAR is sysrouted FROM one or more of the following:

• APAR is sysrouted TO one or more of the following:

Fix information

• Fixed component name

  RATL ASSET MGR

• Fixed component ID

  5724R4200

Applicable component levels

• R753 PSY

     UP