Open ID Connect error 401 with MQ web console in Cloud Pak for Integration, when using IBM Cloud Pak foundational services 3.7

Notification

Risk classification

Informational

Risk categories

Data Access Loss

Subcategories for Informational notifications

Troubleshooting & Fixes

Affected Domain

Abstract

IBM Cloud Pak foundational services 3.7 introduces an incompatible change to the Identity and Access Management (IAM) component, which is automatically used by the IBM® MQ web console when using a IBM® Cloud Pak for Integration license. This results in an error being displayed when you first log into the web console.

Description

With single-sign on configured to the IBM Cloud Pak for foundational services 3.7 IAM, opening the MQ web console will show the following error:

{"error_description":"OpenID Connect client returned with status: SEND_401","error":401}

Recommended Action

Refreshing your browser window should allow you to access the MQ web console. If you are using MQ Operator 1.5 or above, you can upgrade to any of the following operand versions (or higher) to prevent this issue:

9.2.0.0-r3
9.2.1.0-r2
9.2.2.0-r1

Date first published

30 March 2021

[{"Risk Classification":"Informational","Line of Business":{"code":"LOB45","label":"Automation"},"Business Unit":{"code":"BU053","label":"Cloud & Data Platform"},"Product":{"code":"SS8QTD","label":"IBM Cloud Pak for Integration"},"ARM Category":[{"code":"a8m0z0000001hoRAAQ","label":"Queue Manager (MQ)"}],"ARM Case Number":"","Platform":[{"code":"PF025","label":"Platform Independent"}],"Version":"2020.2.1;2020.3.1;2020.4.1"}]

Tips