I am doing some work for a client (on my own time - not STLCC) who has two different FIM Service/Portal sites configured. On the sync server is a portal addressed by fimadmin.instution.edu and another by fim.institution.edu. There are actually three servers: a sync/service/portal server, and two FIM service/portal servers which are behind a load balancer. Each server has a local hosts file entry pointing to itself for the site/service that it hosts.
On the fimadmin site, the display of user details works fine. There are additional tabs of user information configured.
On the fim site, the loading of the user details stops with an error and the custom tabs do not appear. At the bottom of the pop-up in red text: "There's an error in the Person display configuration. Please contact your system administrator." When I turn on debug logging for the portal, I often see the error: "The address of the security token issuer is not specified. An explicit issuer address must be specified in the binding for target 'http://fim.institution.edu:5725/ResourceManagementService/Enumeration' or the local issuer address must be configured in the credentials." The two load-balanced servers are where the problem seems to be. I ruled out a name association problem by putting in a fim.institution.edu entry in local hosts for the sync server (which is normally fimadmin) and it displayed the user detail just fine when accessed locally there. The two problem servers also have SSL certs applied so that users accessing them can usehttps://fimadmin.institution.edu to reach the site and protect data, but it also is reachable by http and this really seems to be a problem in the authentication to the service and not to the web site.
Does anyone have a suggestion as to what might cause that kind of error, or what I could do to try to resolve it?
Thanks!
Chris
