Federation Manager Agent for Windows Authentication Release Notes › Known Issues › HMAC Default Settings for the UI and the Federation Manager Agent for Windows Do Not Match (138361)

HMAC Default Settings for the UI and the Federation Manager Agent for Windows Do Not Match (138361)

Symptom:

In the Federation Manager UI, the Enable HMAC for Open-format Cookies setting defaults to No (unchecked). This setting is located in Infrastructure, Deployment Settings, Cookie Settings. When you run the configuration wizard for the Federation Manager Agent for Windows Authentication, the HMAC setting defaults to Yes.

These settings must match.

Solution:

Change the settings so they match.

For the Federation Manager Agent, set the value useHMAC to true (UseHMAC=true). This setting is in the IWAConnectorConfig.conf file, which is in the directory FederationManager\connectors\IWA\config.