We are facing a very strange issue in user group assignments where if a newly created user is assigned to all the available user groups right away, it somehow gets corrupted and becomes unable to access the desired URLs for first 24-48 hours. I am breaking it down further –
– Create a User.
– Assign it under all the available user groups.
– Try accessing the desired URL, it will throw 400 Bad Request.
– Change the user group assignment and put it under some of the available user groups, it will not work.
– After 24-48 hours try again and the same user will start working.
Based on these observation we suspect that there is time limit in OpenAM for how long before a usercan be put under all the user groups essentially handing him all the functionality. Please suggest.