We are configuring SSO on ICN 3.0.9 and when we generated the ICN config file for FBA there are 2 new properties that are not document. Custom is implementing SAML with ICN so do the 2 values need to be tru and false? Is there ant documentation on the attributes in relation to CPE and ICN?

</property>

<property name="OAuthODIC_IDP_Enable">

<value>****INSERT VALUE****</value>

<description>ICN configuration tool changes the security role to user/group mapping for 'Authenticated' and 'AllAuthenticated' roles special subject to 'All Authenticated in Trust Realms' if the option is checked and more than one trusted realms defined.

</description>

<displayName>Enable OAuth/OIDC Identity Provider support</displayName>

</property>

<property name="OAuthOIDC_SSO_Enable_To_CPE">

<value>****INSERT VALUE****</value>

<description>The option is checked and the two JVM parameters are removed

Hi,

Is it a container environment? For container, it’s SAML setting for the Liberty, here is the liberty link https://www.ibm.com/docs/en/was-liberty/base?topic=liberty-configuring-saml-web-browser-sso-in . And we also tried with https://www.ibm.com/support/pages/node/595209?mhsrc=ibmsearch_a&mhq=configure%20SAML%20for%20navigator for ICN.

For onprem environment, it’s the configuration for WAS. We tested with https://www.ibm.com/support/pages/node/595209?mhsrc=ibmsearch_a&mhq=configure%20SAML%20for%20navigator for ICN.

Thank you for responding, the customer is not using Liberty, we did try and remove the lines but the cmd failed. Do we just put both to false?

Please open a support case to get assistance on this.