When successfully entering the username into the identity url with the correct password, I would end up getting an IAM-3050021:The user with the key null does not exist error. I did notice the stack trace differed to the other remaining 2 results so this may (or may not) resolve your Error 500--Internal Server Error when accessing OIM

The stack error is as follows:

javax.servlet.ServletException: oracle.iam.identity.exception.UserManagerException: oracle.iam.platform.authopss.exception.AccessDeniedException: java.lang.RuntimeException: LoggedIn userKey 'null' OR the passed user key 'null' is coming as NULL.
at oracle.iam.platform.servletfilter.PwdMgmtNavigationFilter.redirectBasedOnRoles(PwdMgmtNavigationFilter.java:192)
at oracle.iam.platform.servletfilter.PwdMgmtNavigationFilter.doFilter(PwdMgmtNavigationFilter.java:147)
at weblogic.servlet.internal.FilterChainImpl.doFilter(FilterChainImpl.java:56)
at oracle.bpel.services.workflow.client.worklist.util.WorkflowFilter.doFilter(WorkflowFilter.java:175)
at weblogic.servlet.internal.FilterChainImpl.doFilter(FilterChainImpl.java:56)
at oracle.bpel.services.workflow.client.worklist.util.DisableUrlSessionFilter.doFilter(DisableUrlSessionFilter.java:70)
...
Caused by: oracle.iam.identity.exception.UserManagerException: oracle.iam.platform.authopss.exception.AccessDeniedException: java.lang.RuntimeException: LoggedIn userKey 'null' OR the passed user key 'null' is coming as NULL.
at oracle.iam.platform.servletfilter.PwdMgmtNavigationFilter.getLoginFlowDetailsForUser(PwdMgmtNavigationFilter.java:324)
at oracle.iam.platform.servletfilter.PwdMgmtNavigationFilter.redirectBasedOnRoles(PwdMgmtNavigationFilter.java:190)
... 29 more
Caused by: oracle.iam.platform.authopss.exception.AccessDeniedException: java.lang.RuntimeException: LoggedIn userKey 'null' OR the passed user key 'null' is coming as NULL.
at oracle.iam.platform.authopss.impl.AuthorizationServiceImpl.hasAccess(AuthorizationServiceImpl.java:153)
at sun.reflect.GeneratedMethodAccessor1234.invoke(Unknown Source)
at sun.reflect.DelegatingMethodAccessorImpl.invoke(DelegatingMethodAccessorImpl.java:43)
at java.lang.reflect.Method.invoke(Method.java:606)

I noticed that within the stack trace, the last method to be called was 'redirectBasedOnRoles'. Knowing that I recently configured the HOW TO: Configure OIM 11g AD/LDAP Authentication from Weblogic, turns out that the group assigned to the users were not getting assigned within weblogic under the users within the 'user and group' section.

To immediately resolve this, I deleted the AD provider within WLS that I created a few days ago. To resolve this issue moving forward, I re-created the Authentication Provider and ensured that the AD user has the associated oimusers group membership

Then I used a LDAP query to ensure the group in question was getting transferred over. Once you restarted WLS admin, you would be able to see the group within the 'user and group' tab with the group having a parent group of 'oimusers' also.

I was then able to log into OIM using the account

About the author