IZ35742: SAML 1.X BROWSER-ARTIFACT NEEDS CLAIMS CONTAINING THE ASSERTION RETRIEVAL SERVICE URL

IBM Tivoli Federated Identity Manager 6.2.0 fix pack 3 (6.2.0-TIV-TFIM-FP0003)
Tivoli Federated Identity Manager 6.2.0 Fixpack 8 (6.2.0-TIV-TFIM-FP0008)
Tivoli Federated Identity Manager 6.2.0 Fixpack 9 (6.2.0-TIV-TFIM-FP0009)
Tivoli Federated Identity Manager 6.2.0 Fixpack 13 (6.2.0-TIV-TFIM-FP0013)

APAR status

• Closed as program error.

Error description

• We need a way to ensure that the Issuer that comes in an
  Assertion from a particular IDP partner has been set to the
  correct value and that the IDP is not trying to spoof an
  assertion from another partner.
  

Local fix

Problem summary

• We need a way to ensure that the Issuer that co
  mes in an Assertion from a particular IDP partner has been set t
  o the correct value and the IDP is not trying to spoof an assert
  ion from another partner.
  

Problem conclusion

• The fix for this APAR is expected to be cont
  ained in the following maintenance delivery vehicle:
  | fix pack | 6.2.0-TIV-TFIM-FP0002
  

Temporary fix

Comments

APAR Information

• APAR is sysrouted FROM one or more of the following:

• APAR is sysrouted TO one or more of the following:

  IZ35746 IZ48044

Fix information

• Fixed component name

  TIV FED ID MGR

• Fixed component ID

  5724L7300

Applicable component levels

• R620 PSN

     UP