WFM exception if the saml:nameID
element contains multiple
parts
WFM now throws an exception if the saml:nameID
element contains
more than one part such as an XML comment in the user name. For example,
work<!--comment-->brain
. In this case, the login will fail and the
Workforce Management log will show a SignOnException
with a message of
"nameID cannot contain multiple parts".
This change will not affect the signature validation since the XML is canonicalized (comments are removed) before the signature is validated.
For more information on SAML configuration in Workforce Management, see "Configuring the WFM SAML Adapter" in the Infor Workforce Management Installation and Configuration Guide.