Note that there are some explanatory texts on larger screens.

plurals
  1. PO
    primarykey
    data
    text
    <p>After a whole week I finally figured it out, with the help of Stackoverflow and the <a href="https://lists.forgerock.org/mailman/listinfo/openam" rel="noreferrer">OpenAM Mailing list</a>. There were two main problems: missing log files and missing cookie domains. Installing the OpenAM server and the Web Policy Agent is difficult, there are a lot of log files and many different configuration options. If you select the wrong options, it won't work. It is impossible to make it work without knowing what is going on, which can only be determined by a suitable log file.</p> <p><strong>Missing Log for Web Policy Agent</strong> : The log level must be set in the "Java properties" files. There are two "Java Properties" files for the Web Policy Agent, <code>OpenSSOAgentBootstrap.properties</code> and <code>OpenSSOAgentConfiguration.properties</code>. The log and debug level which is named <code>com.sun.identity.agents.config.debug.level</code> can and must be defined in both (!) files, and it should be set to the high level, <code>all:4</code> or <code>all:5</code>. The format is important. Even if you do this, the <code>AgentConfiguration.properties</code> file is only used when the agent is not working in centralized config mode. The profile must be set to "local".</p> <p><strong>Missing Cookie Domain</strong>: Do not forget to enter the right Cookie Domain during the setup of the OpenAM server in the beginning, or add it afterwards if it is missing. On the OpenAM server, go to <code>Configuration &gt; System &gt; Platform</code> and change the Cookie Domain Value to your domain (for instace <code>.example.com</code>) if it is missing. Otherwise the browser will lose your cookie during the redirect process. Somehow I had an empty entry for the cookie domain at the OpenAM server, I guess a forgot a dot (<code>example.com</code> instead of <code>.example.com</code>) so that it was invalid (or something like that).</p> <p>This <a href="http://developers.sun.com/identity/reference/techart/troubleshooting2.html" rel="noreferrer">troubleshooting site</a> was helpful to locate the problem.</p>
    singulars
    1. This table or related slice is empty.
    plurals
    1. This table or related slice is empty.
    1. This table or related slice is empty.
    1. This table or related slice is empty.
    1. VO
      singulars
      1. This table or related slice is empty.
    2. VO
      singulars
      1. This table or related slice is empty.
    3. VO
      singulars
      1. This table or related slice is empty.
    1. This table or related slice is empty.
 

Querying!

 
Guidance

SQuiL has stopped working due to an internal error.

If you are curious you may find further information in the browser console, which is accessible through the devtools (F12).

Reload