Symptoms

When syncing a policy that includes Forms-based SSO configuration, the copy placed on target devices include tabs which render the SSO config useless without correct.

Impact

All devices, other than the source device, within a Device Group will receive a malformed SSO configuration object. The added whitespace will prevent the SSO configuration from working.

Conditions

This issue appears to be isolated to Forms-based SSO configuration objects associated with Access Profile exchanged via Policy Sync.

Workaround

Workaround is to modify the offending SSO configuration object via tmsh.

Fix Information

Previously, Policy Sync would add whitespace to Forms-based SSO configuration objects, which prevented the configuration from running. Now Forms-based SSO configuration will not have whitespace added and configuration runs as expected.

Behavior Change