Ytukyg

We have a file-based SAML IdP configuration for WSO2AM-2.1.0 (similar to this one) and we'd like to migrate to wso2am-2.6.0

Using the same IdP cnofiguration file the IdP is not configured and in the logs we see:

ERROR - IdentityProvider Error while building default provisioning connector config for IDP oamidp.

Cause : No configured name found for ProvisioningConnectorConfig Building rest of the IDP configs

It's the XML file configuration in repository/conf/identity/identity-providers/

I found an example configuration documented in here https://docs.wso2.com/display/IS570/Configuring+a+SP+and+IdP+Using+Configuration+Files

I believe our configuration is compliant with the exaample (which is not mentioning any ProvisioningConnectorConfig tag

the DefaultProvisioningConnectorConfig needs to be commented out when empty

<IdentityProvider>

    <IdentityProviderName>oamidp</IdentityProviderName>

    <DisplayName>oamidp</DisplayName>

    <IdentityProviderDescription>Access Manager DEV</IdentityProviderDescription>

    <Alias>oamidp</Alias>

    <IsPrimary/>

    <IsEnabled>true</IsEnabled>

    <IsFederationHub/>

    <HomeRealmId/>

    <ProvisioningRole/>

    <FederatedAuthenticatorConfigs>

        <saml2>

            <Name>SAMLSSOAuthenticator</Name>

            <DisplayName>samlsso</DisplayName>

            <IsEnabled>true</IsEnabled>

            <Properties>

                <property>

                    <Name>IdpEntityId</Name>

                    <Value>http://localhost/simplesaml/saml2/idp/metadata.php</Value>

                </property>

                <property>

                    <Name>IsLogoutEnabled</Name>

                    <Value>true</Value>

                </property>

                <property>

                    <Name>SPEntityId</Name>

                    <Value>https://wso2am-test/sp</Value>

                </property>

                <property>

                    <Name>SSOUrl</Name>

                    <Value>http://localhost/simplesaml/saml2/idp/SSOService.php</Value>

                </property>

                <property>

                    <Name>isAssertionSigned</Name>

                    <Value>false</Value>

                </property>

                <property>

                    <Name>commonAuthQueryParams</Name>

                    <Value/>

                </property>

                <property>

                    <Name>IsUserIdInClaims</Name>

                    <Value>false</Value>

                </property>

                <property>

                    <Name>IsLogoutReqSigned</Name>

                    <Value>false</Value>

                </property>

                <property>

                    <Name>IsAssertionEncrypted</Name>

                    <Value>false</Value>

                </property>

                <property>

                    <Name>IsAuthReqSigned</Name>

                    <Value>true</Value>

]               </property>

              <!-- there was a typo in the code, we have both values to be sure -->

                <property>

                    <Name>ISAuthnReqSigned</Name>

                    <Value>true</Value>

                </property>

                <property>

                    <Name>IsAuthnRespSigned</Name>

                    <Value>true</Value>

                </property>

                <property>

                    <Name>LogoutReqUrl</Name>

                    <Value>https://logon-test.mycomp.com/oamfed/idp/samlv20</Value>

                    <!-- Value>false</Value -->

                </property>

            </Properties>

        </saml2>

    </FederatedAuthenticatorConfigs>

    <DefaultAuthenticatorConfig>SAMLSSOAuthenticator</DefaultAuthenticatorConfig>

    <ProvisioningConnectorConfigs/>



    <!-- DefaultProvisioningConnectorConfig/ -->

    <ClaimConfig>

        <LocalClaimDialect>true</LocalClaimDialect>

        <ClaimMappings>



        </ClaimMappings>

    </ClaimConfig>

    <Certificate>MII....ZNYg=</Certificate>

    <PermissionAndRoleConfig/>

    <JustInTimeProvisioningConfig>

        <UserStoreClaimUri/>

        <ProvisioningUserStore/>

        <IsProvisioningEnabled>false</IsProvisioningEnabled>

    </JustInTimeProvisioningConfig>

</IdentityProvider>