000032687 - Workday Web Service Identity Collector (IDC) on WebSphere fails with 'Failed to add WS-Security header to request' error in RSA Identity Governance & Lifecycle 

Document created by RSA Customer Support Employee on Jan 11, 2017•Last modified by RSA Customer Support on Aug 31, 2020
Version 5Show Document
  • Comment • 0
  • View in full screen mode

Article Content

Article Number000032687
Applies ToRSA Product Set: RSA Identity Governance & Lifecycle 
RSA Version/Condition: 6.9.1, 7.0.x, 7.1.x, 7.2.0
Platform/Application Server: WebSphere 8.5.x
 
IssueWhen using a Workday Web Service Identity Collector (IDC) on WebSphere, a Test of the Collector (Collectors > Identity Collectors > {Collector name} > Test) fails with the following error in the user interface: 
 
com.aveksa.common.DataReadException: Data reading failed due to :
javax.xml.ws.soap.SOAPFaultException: Failed to add WS-Security header to request


Running the Collector fails with the same error in the aveksaServer.log file. The aveksaServer.log file may be downloaded from the RSA Identity Governance & Lifecycle user interface (Admin > System > Server Nodes tab > under Logs.)
 
CauseThis error occurs when starting WebSphere Application Server Version 8.5. The SOAPMessage.getSOAPHeader and getSOAPBody methods throw a SOAPException if there is no corresponding element in the message.
 
ResolutionSet the system property com.ibm.websphere.webservices.soap.enable.legacy.get.behavior value to true.  Steps to set this property from the WebSphere web console are below:
  1. Open the WebSphere web console.
  2. Navigate to Servers > Server Types > WebSphere application servers > and select the server name.
  3. Under Server Infrastructure, select Java and process management > Process definition > Java virtual machine > Custom Properties. 
  4. Click New to add a new custom property.
  5. Enter the new property name as com.ibm.websphere.webservices.soap.enable.legacy.get.behavior.
  6. Set the property value to true.
  7. Click OK and Save.
  8. Restart the WebSphere Application Server.
Note: If this is a WebSphere cluster, repeat steps 3 to 7 to add the system property, com.ibm.websphere.webservices.soap.enable.legacy.get.behavior, to each WebSphere node in the cluster.
 

Attachments

    Outcomes