Cannot modify Attributes within a Shared Settings defined Attribute Set

  • 7018109
  • 28-Sep-2016
  • 18-Oct-2016

Environment

NetIQ Access Manager 4.2
NetIQ Access Manager 4.1
NetIQ Access Manager 4.0

Situation

Administrator trying to generate an Attribute set to use with SAML SP, or Access gateway using the Identity Servers screen --> Shared Settings tab --> Attribute Sets sub-tab --> either create a new Set. When this set is created and a change is required, one has to manually delete the existing attribute and recreate the new one, rather than simply modifying the attribute.
 
Another side effect of this is that the administrator cannot see what choices were selected when the attribute was added to the Set as we simply display the "Local Attribute" and "Remote Attribute" for it when viewing, and not additional options such as "Remote namespace" and "Remote format". These are important when trying to do user matching with SAML Identity Servers. They are not displayed on the parent screen, and since you cannot edit attributes once they've been added to the parent screen.... you are left completely unable to know how they are configured.

Resolution

Fixed in NAM 4.3. Admin can modify the attribute set and view every field within that attribute set.