UMA : My previously working UMA deployment in 3.1.3 stops to work in 3.1.4

By: Yuriy Zabrovarnyy staff 23 Oct 2018 at 11:14 a.m. CDT

1 Response
Yuriy Zabrovarnyy gravatar
I had UMA flow working on 3.1.3. After upgrade to 3.1.4 it stops to work with error ``` Access denied because there are no any protection. Make sure it is intentional behavior. ``` What can I do to make it work again?
Ubuntu 16.04
closed

Answers

By Yuriy Zabrovarnyy staff 23 Oct 2018 at 11:17 a.m. CDT

Copy
Yuriy Zabrovarnyy gravatar
In 3.1.3 `umaGrantAccessIfNoPolicies: true`, in 3.1.4 `umaGrantAccessIfNoPolicies: false`. This is the reason why it starts to fail in 3.1.4. We changed default value to `false` to force admin chose between two options: * specify UMA RPT Policy that protects resource to which request is performed * set `umaGrantAccessIfNoPolicies: true` manually and confirm that it is ok that UMA Resource is not protected by any policy, making it open for anyone. Doc reference [https://www.gluu.org/docs/ce/3.1.4/operation/security/#uma](https://www.gluu.org/docs/ce/3.1.4/operation/security/#uma)

Post an answer