Hi,
I am trying setup my AM 4.5 Appliance to integrate with SSPR 4.4 using OAuth for SSO. I had following the SSPR Integration with Access Manager documentation and configured accordingly.
When I try to access SSPR, it was redirected to AM for login. After AM Login, SSPR displayed the following error
Error 5015
An error has occurred. If this error occurs repeatedly please contact your help desk. { 5015 ERROR_INTERNAL (unexpected error processing request: com.google.gson.JsonSyntaxException: java.lang.IllegalStateException: Expected a string but was BEGIN_ARRAY at line 1 column 98 path $., cause:java.lang.IllegalStateException: Expected a string but was BEGIN_ARRAY at line 1 column 98 path $. [615C28403BD4C6EB1EA0307326F9F4DB0ABE7E79]) }
Any clues?
Regards,
Keng
Hi All,
The issue is resolved.
I was using the dafault OAuth Scope 'profile' which have LDAP:cn attribute in place which is as specified in the documentation. However after under a lot of test and even with a SR Support, nothing seems wrong.
However with deeper investigating the 'Profile' Attribute Set, it was found that it was mapping as 'nickname' remote attribute. This sounded a bit strange to me.
Hence I create a new 'SSPR' Attribute Set with LDAP:cn local attribute and mapping of 'cn' remote attribute. Create a new OAuth Scope 'sspr' and Update Identity Server. Modify SSPR to use the sspr scope and apply configuration.
Test SSPR Login, and this time I can successfully login to SSPR via NAM.
Then doing further test by modify SSPR to use the default NAM scope 'profile' and this time use 'nickname' as the Login Attribute. Apply and test. No error.
So this is where the Documentation is not clear I presumed.
Regards,
Keng
