Symptoms

Custom HTTP headers added by Oracle Access Manager (OAM) server is missing from the message intended for the backend web application server, when the request contain an embedded AJAX code to load another protected resource

Impact

Custom HTTP header not added.

Conditions

This issue appears only if the protected resource contains an embedded code to generate request for another protected resource.

Workaround

None

Fix Information

OAM did not add custom HTTP header for requests forwarded to backend server that were generated by embedded code inside an HTTP resource. This fix will ensure that custom HTTP header is added to all requests forwarded to backend server.

Behavior Change