IZ48044: SAML 1.X BROWSER-ARTIFACT NEEDS CLAIMS CONTAINING THE ASSERTION RETRIEVAL SERVICE URL

Tivoli Fed Id Mgr Business Gateway v6.2.0, Fix Pack 8, 6.2.0-TIV-TFIMBG-FP0008
Tivoli Fed Id Mgr Business Gateway v6.2.0, Fix Pack 9, 6.2.0-TIV-TFIMBG-FP0009
Tivoli Fed Id Mgr Business Gateway v6.2.0, Fix Pack 13, 6.2.0-TIV-TFIMBG-FP0013

APAR status

• Closed as program error.

Error description

• We need a way to ensure that the Issuer that comes in an
  Assertion from a particular IDP partner has been set to the
  correct value and that the IDP is not trying to spoof an
  assertion from another partner.
  

Local fix

Problem summary

• We need a way to ensure that the Issuer that comes in an
  Assertion from a particular IDP partner has been set to the
  correct value and the IDP is not trying to spoof an assertion
  from another partner.
  

Problem conclusion

• The fix for this APAR will be contained in the following
  maintenance packages:
  | fix pack | 6.2.0-TIV-TFIMBG-FP0002 |
  

Temporary fix

Comments

APAR Information

• APAR is sysrouted FROM one or more of the following:

  IZ35742

• APAR is sysrouted TO one or more of the following:

Fix information

• Fixed component name

  FIM BUS GATEWAY

• Fixed component ID

  5724Q8200

Applicable component levels

• R620 PSY

     UP

• R610 PSN

     UP

• R611 PSN

     UP