8.2.0-ISS-SAMESSO-IMS-FP0001

Download Description

This fix pack corrects the following issues and limitations found in IBM Security Access Manager for Enterprise Single Sign-On version 8.2 and 8.1 release:

• APAR IV11101

Symptom: A deadlock occurs when you delete a user through a provisioning system such as Tivoli Identity Manager.




• APAR IV11556

Symptom: The user is redirected to the AccessAssistant logon page after the user completes the unlock account page and clicks Next.




• APAR IV15402

Symptom: In the AccessAdmin non-English locale user interface, the secret questions are displayed in English. Users also cannot delete or add questions in the non-English locale interface of AccessAdmin. The changes are not saved.




• APAR IV16928

Symptom: The Enterprise user name is not correctly displayed in the AccessAdmin if the Search audit logs for Revoke users is done for deleted user.




• APAR IV16905

Symptom: Redirection of pre-configured web application link for AccessAssistant and Web Workplace does not work when log on to AccessAssistant and Web Workplace is required.




• Defect

Symptom: The user cannot log on to AccessAssistant and WebWorkplace by using a UPN name format. This issue occurs when The user must change the password at next logon option is not selected during user provisioning. The option is in AccessAdmin > System policies > Password Policies > Password Change Policies




• Defect

Symptom: There is no sentinel JSP page to check whether the IMS Server and database connection is running.




• Defect

Symptom: As the number of configured repositories increase, the IMS Server startup time also increases progressively.




• Defect

Symptom: An unexpected bind user DN validation warning message is displayed when you change the SSL connection setting in the IMS Configuration Wizard.




• Defect

Symptom: The error message displayed is not correct. This issue occurs during the 8.1 to 8.2 upgrade in the Upgrade Configuration Wizard, LDAP configuration page. When the user enters the wrong port or bind distinguished name, the error message "Specify the Domain Name and NetBios Name" is displayed.




• Defect

Symptom: User cannot log on with fingerprint to AccessAgent with only a username. This issue occurs on a newly installed IMS Server 8.2 that is configured with a Tivoli Directory Server or base connector. You need to run fixEnterpriseDirectoryConfig.bat to fix this issue.




• Defect

Symptom: You cannot upgrade the IMS Server from version 8.1 to version 8.2 if AccessAnywhere or AlwaysDeny Connector is configured in IMS Server 8.1.




• Defect

Symptom: The nameLdapAttribute is not found for a newly registered user. This issue occurs after upgrading the IMS Server from version 8.1 to version 8.2 with Tivoli Directory Server.




• Defect

Symptom: The bind user name is case sensitive in IMS Server 8.2, which might cause installation or upgrade to fail. The issue occurs if the bind user name in the Active Directory and the bind user name in the IMS Server have a different case.




• Defect

Symptom: Cannot search for Delete user and Reset ISAM ESSO password audit log events. These events are not displayed in the AccessAdmin user interface.




• Defect

Symptom: IMS Server can be configured to autostart when WebSphere Application Server is started up.




• Limitation

Symptom: If you are using a Tivoli Directory Server as your repository and you are enrolling a fingerprint for the first time or if you already have biometric support but your Wallet is not cached, you are prompted to enter your user name. Your user name must have a prefix. The prefix is the Tivoli Directory Server host name or IP that you specified during the Enterprise Directory configuration. For example, IBMTDSHost\user where <IBMTDSHost> is the Tivoli Directory Server host name or IP and <user> is the user name.