Login issue for end user after upgrade to 8.4

Dear Community,

We upgraded IIQ from 8.1 to 8.4 (8.1 to 8.2 to 8.3 to 8.4) till 8.3 everything worked fine.

in 8.4 we are facing an issue, users without "system administrator" capability aren’t being able access the home page.


image (1).png

Syslog:


image (2).png

Logs of exception:

2024-06-04T10:34:21,379 ERROR https-jsse-nio-8443-exec-3 sailpoint.web.util.SailPointActionListener:44 - Caught unhandled JSF exception: #{login.login}: java.lang.RuntimeException: An ‘in’ filter must have an array or collection value.
javax.faces.FacesException: #{login.login}: java.lang.RuntimeException: An ‘in’ filter must have an array or collection value.
        at com.sun.faces.application.ActionListenerImpl.processAction(ActionListenerImpl.java:118) ~[javax.faces-2.2.20.jar:2.2.20]
        at sailpoint.web.util.SailPointActionListener.processAction(SailPointActionListener.java:42) [identityiq.jar:8.4 Build bdd0ed4de58-20230919-192552]
        at javax.faces.component.UICommand.broadcast(UICommand.java:315) [javax.faces-2.2.20.jar:2.2.20]
        at javax.faces.component.UIViewRoot.broadcastEvents(UIViewRoot.java:790) [javax.faces-2.2.20.jar:2.2.20]
        at javax.faces.component.UIViewRoot.processApplication(UIViewRoot.java:1282) [javax.faces-2.2.20.jar:2.2.20]
        at com.sun.faces.lifecycle.InvokeApplicationPhase.execute(InvokeApplicationPhase.java:81) [javax.faces-2.2.20.jar:2.2.20]
        at com.sun.faces.lifecycle.Phase.doPhase(Phase.java:101) [javax.faces-2.2.20.jar:2.2.20]
        at com.sun.faces.lifecycle.LifecycleImpl.execute(LifecycleImpl.java:198) [javax.faces-2.2.20.jar:2.2.20]
        at javax.faces.webapp.FacesServlet.service(FacesServlet.java:658) [javax.faces-2.2.20.jar:2.2.20]
        at org.apache.catalina.core.ApplicationFilterChain.internalDoFilter(ApplicationFilterChain.java:200) [catalina.jar:9.0.88]
        at org.apache.catalina.core.ApplicationFilterChain.doFilter(ApplicationFilterChain.java:144) [catalina.jar:9.0.88]
        at org.apache.myfaces.webapp.filter.ExtensionsFilter.doFilter(ExtensionsFilter.java:357) [tomahawk20-1.1.14.jar:1.1.14]
        at sailpoint.web.MyFacesExtensionsFilter.doFilter(MyFacesExtensionsFilter.java:62) [identityiq.jar:8.4 Build bdd0ed4de58-20230919-192552]
        at org.apache.catalina.core.ApplicationFilterChain.internalDoFilter(ApplicationFilterChain.java:169) [catalina.jar:9.0.88]
        at org.apache.catalina.core.ApplicationFilterChain.doFilter(ApplicationFilterChain.java:144) [catalina.jar:9.0.88]
        at org.apache.tomcat.websocket.server.WsFilter.doFilter(WsFilter.java:51) [tomcat-websocket.jar:9.0.88]
        at org.apache.catalina.core.ApplicationFilterChain.internalDoFilter(ApplicationFilterChain.java:169) [catalina.jar:9.0.88]
        at org.apache.catalina.core.ApplicationFilterChain.doFilter(ApplicationFilterChain.java:144) [catalina.jar:9.0.88]
        at sailpoint.web.SailPointResponseFilter.doFilter(SailPointResponseFilter.java:76) [identityiq.jar:8.4 Build bdd0ed4de58-20230919-192552]
        at org.apache.catalina.core.ApplicationFilterChain.internalDoFilter(ApplicationFilterChain.java:169) [catalina.jar:9.0.88]
        at org.apache.catalina.core.ApplicationFilterChain.doFilter(ApplicationFilterChain.java:144) [catalina.jar:9.0.88]
        at sailpoint.web.PageAuthorizationFilter.doFilter(PageAuthorizationFilter.java:102) [identityiq.jar:8.4 Build bdd0ed4de58-20230919-192552]
        at org.apache.catalina.core.ApplicationFilterChain.internalDoFilter(ApplicationFilterChain.java:169) [catalina.jar:9.0.88]
        at org.apache.catalina.core.ApplicationFilterChain.doFilter(ApplicationFilterChain.java:144) [catalina.jar:9.0.88]
        at sailpoint.web.PageAuthenticationFilter$Chainlink.doFilter(PageAuthenticationFilter.java:290) [identityiq.jar:8.4 Build bdd0ed4de58-20230919-192552]
        at sailpoint.service.PageAuthenticationService$15.command(PageAuthenticationService.java:1291) [identityiq.jar:8.4 Build bdd0ed4de58-20230919-192552]
        at sailpoint.service.PageAuthenticationService.handleCommands(PageAuthenticationService.java:659) [identityiq.jar:8.4 Build bdd0ed4de58-20230919-192552]
        at sailpoint.web.PageAuthenticationFilter$MyHandler.handle(PageAuthenticationFilter.java:332) [identityiq.jar:8.4 Build bdd0ed4de58-20230919-192552]
        at sailpoint.web.PageAuthenticationFilter.doFilter(PageAuthenticationFilter.java:127) [identityiq.jar:8.4 Build bdd0ed4de58-20230919-192552]
        at org.apache.catalina.core.ApplicationFilterChain.internalDoFilter(ApplicationFilterChain.java:169) [catalina.jar:9.0.88]
        at org.apache.catalina.core.ApplicationFilterChain.doFilter(ApplicationFilterChain.java:144) [catalina.jar:9.0.88]
        at sailpoint.web.SailPointContextRequestFilter.doFilter(SailPointContextRequestFilter.java:68) [identityiq.jar:8.4 Build bdd0ed4de58-20230919-192552]
        at org.apache.catalina.core.ApplicationFilterChain.internalDoFilter(ApplicationFilterChain.java:169) [catalina.jar:9.0.88]
        at org.apache.catalina.core.ApplicationFilterChain.doFilter(ApplicationFilterChain.java:144) [catalina.jar:9.0.88]
        at sailpoint.web.util.MethodFilter.doFilter(MethodFilter.java:51) [identityiq.jar:8.4 Build bdd0ed4de58-20230919-192552]
        at org.apache.catalina.core.ApplicationFilterChain.internalDoFilter(ApplicationFilterChain.java:169) [catalina.jar:9.0.88]
        at org.apache.catalina.core.ApplicationFilterChain.doFilter(ApplicationFilterChain.java:144) [catalina.jar:9.0.88]
        at sailpoint.web.SailPointPollingRequestFilter.doFilter(SailPointPollingRequestFilter.java:151) [identityiq.jar:8.4 Build bdd0ed4de58-20230919-192552]
        at org.apache.catalina.core.ApplicationFilterChain.internalDoFilter(ApplicationFilterChain.java:169) [catalina.jar:9.0.88]
        at org.apache.catalina.core.ApplicationFilterChain.doFilter(ApplicationFilterChain.java:144) [catalina.jar:9.0.88]
        at sailpoint.web.util.TimingFilter.doFilter(TimingFilter.java:88) [identityiq.jar:8.4 Build bdd0ed4de58-20230919-192552]
        at org.apache.catalina.core.ApplicationFilterChain.internalDoFilter(ApplicationFilterChain.java:169) [catalina.jar:9.0.88]
        at org.apache.catalina.core.ApplicationFilterChain.doFilter(ApplicationFilterChain.java:144) [catalina.jar:9.0.88]
        at sailpoint.web.ResponseHeaderFilter.doFilter(ResponseHeaderFilter.java:63) [identityiq.jar:8.4 Build bdd0ed4de58-20230919-192552]
        at org.apache.catalina.core.ApplicationFilterChain.internalDoFilter(ApplicationFilterChain.java:169) [catalina.jar:9.0.88]
        at org.apache.catalina.core.ApplicationFilterChain.doFilter(ApplicationFilterChain.java:144) [catalina.jar:9.0.88]
        at org.springframework.web.filter.CharacterEncodingFilter.doFilterInternal(CharacterEncodingFilter.java:201) [spring-web-5.2.24.RELEASE.jar:5.2.24.RELEASE]
        at org.springframework.web.filter.OncePerRequestFilter.doFilter(OncePerRequestFilter.java:119) [spring-web-5.2.24.RELEASE.jar:5.2.24.RELEASE]
        at org.apache.catalina.core.ApplicationFilterChain.internalDoFilter(ApplicationFilterChain.java:169) [catalina.jar:9.0.88]
        at org.apache.catalina.core.ApplicationFilterChain.doFilter(ApplicationFilterChain.java:144) [catalina.jar:9.0.88]
        at org.apache.catalina.core.StandardWrapperValve.invoke(StandardWrapperValve.java:168) [catalina.jar:9.0.88]
        at org.apache.catalina.core.StandardContextValve.invoke(StandardContextValve.java:90) [catalina.jar:9.0.88]
        at org.apache.catalina.authenticator.AuthenticatorBase.invoke(AuthenticatorBase.java:481) [catalina.jar:9.0.88]
        at org.apache.catalina.core.StandardHostValve.invoke(StandardHostValve.java:130) [catalina.jar:9.0.88]
        at org.apache.catalina.valves.ErrorReportValve.invoke(ErrorReportValve.java:93) [catalina.jar:9.0.88]
        at org.apache.catalina.valves.AbstractAccessLogValve.invoke(AbstractAccessLogValve.java:670) [catalina.jar:9.0.88]
        at org.apache.catalina.core.StandardEngineValve.invoke(StandardEngineValve.java:74) [catalina.jar:9.0.88]
        at org.apache.catalina.connector.CoyoteAdapter.service(CoyoteAdapter.java:346) [catalina.jar:9.0.88]
        at org.apache.coyote.http11.Http11Processor.service(Http11Processor.java:390) [tomcat-coyote.jar:9.0.88]
        at org.apache.coyote.AbstractProcessorLight.process(AbstractProcessorLight.java:63) [tomcat-coyote.jar:9.0.88]
        at org.apache.coyote.AbstractProtocol$ConnectionHandler.process(AbstractProtocol.java:928) [tomcat-coyote.jar:9.0.88]
        at org.apache.tomcat.util.net.NioEndpoint$SocketProcessor.doRun(NioEndpoint.java:1786) [tomcat-coyote.jar:9.0.88]
        at org.apache.tomcat.util.net.SocketProcessorBase.run(SocketProcessorBase.java:52) [tomcat-coyote.jar:9.0.88]
        at org.apache.tomcat.util.threads.ThreadPoolExecutor.runWorker(ThreadPoolExecutor.java:1191) [tomcat-util.jar:9.0.88]
        at org.apache.tomcat.util.threads.ThreadPoolExecutor$Worker.run(ThreadPoolExecutor.java:659) [tomcat-util.jar:9.0.88]
        at org.apache.tomcat.util.threads.TaskThread$WrappingRunnable.run(TaskThread.java:63) [tomcat-util.jar:9.0.88]
        at java.lang.Thread.run(Thread.java:840) [?:?]

[Yesterday 10:37] Suresh Maraboina (Unverified)

Caused by: javax.faces.el.EvaluationException: java.lang.RuntimeException: An ‘in’ filter must have an array or collection value.
        at javax.faces.component.MethodBindingMethodExpressionAdapter.invoke(MethodBindingMethodExpressionAdapter.java:101) ~[javax.faces-2.2.20.jar:2.2.20]
        at com.sun.faces.application.ActionListenerImpl.processAction(ActionListenerImpl.java:102) ~[javax.faces-2.2.20.jar:2.2.20]
        … 66 more
Caused by: java.lang.RuntimeException: An ‘in’ filter must have an array or collection value.
        at sailpoint.object.Filter$FilterToExpressionVisitor.visitListFilter(Filter.java:1474) ~[identityiq.jar:8.4 Build bdd0ed4de58-20230919-192552]
        at sailpoint.object.Filter$FilterToExpressionVisitor.visitIn(Filter.java:1434) ~[identityiq.jar:8.4 Build bdd0ed4de58-20230919-192552]
        at sailpoint.object.Filter$LeafFilter.accept(Filter.java:1030) ~[identityiq.jar:8.4 Build bdd0ed4de58-20230919-192552]
        at sailpoint.object.Filter$FilterToExpressionVisitor.visitComposite(Filter.java:1291) ~[identityiq.jar:8.4 Build bdd0ed4de58-20230919-192552]
        at sailpoint.object.Filter$FilterToExpressionVisitor.visitOr(Filter.java:1280) ~[identityiq.jar:8.4 Build bdd0ed4de58-20230919-192552]
        at sailpoint.object.Filter$CompositeFilter.accept(Filter.java:1142) ~[identityiq.jar:8.4 Build bdd0ed4de58-20230919-192552]
        at sailpoint.object.Filter$CompositeFilter.getExpression(Filter.java:1130) ~[identityiq.jar:8.4 Build bdd0ed4de58-20230919-192552]
        at sailpoint.api.Matchmaker.doQuery(Matchmaker.java:422) ~[identityiq.jar:8.4 Build bdd0ed4de58-20230919-192552]
        at sailpoint.api.Matchmaker.isMatch(Matchmaker.java:298) ~[identityiq.jar:8.4 Build bdd0ed4de58-20230919-192552]
        at sailpoint.api.DynamicScopeMatchmaker.isMatch(DynamicScopeMatchmaker.java:119) ~[identityiq.jar:8.4 Build bdd0ed4de58-20230919-192552]
        at sailpoint.api.DynamicScopeMatchmaker.isMatch(DynamicScopeMatchmaker.java:73) ~[identityiq.jar:8.4 Build bdd0ed4de58-20230919-192552]
        at sailpoint.api.DynamicScopeMatchmaker.getMatches(DynamicScopeMatchmaker.java:50) ~[identityiq.jar:8.4 Build bdd0ed4de58-20230919-192552]
        at sailpoint.service.LoginService.putDynamicScopeInSession(LoginService.java:328) ~[identityiq.jar:8.4 Build bdd0ed4de58-20230919-192552]
        at sailpoint.service.LoginService.putDynamicScopeInSession(LoginService.java:322) ~[identityiq.jar:8.4 Build bdd0ed4de58-20230919-192552]
        at sailpoint.service.LoginService.writeIdentitySession(LoginService.java:241) ~[identityiq.jar:8.4 Build bdd0ed4de58-20230919-192552]
        at sailpoint.web.LoginBean.setPrincipal(LoginBean.java:838) ~[identityiq.jar:8.4 Build bdd0ed4de58-20230919-192552]
        at sailpoint.web.LoginBean.login(LoginBean.java:686) ~[identityiq.jar:8.4 Build bdd0ed4de58-20230919-192552]
        at jdk.internal.reflect.NativeMethodAccessorImpl.invoke0(Native Method) ~[?:?]
        at jdk.internal.reflect.NativeMethodAccessorImpl.invoke(NativeMethodAccessorImpl.java:77) ~[?:?]
        at jdk.internal.reflect.DelegatingMethodAccessorImpl.invoke(DelegatingMethodAccessorImpl.java:43) ~[?:?]
        at java.lang.reflect.Method.invoke(Method.java:568) ~[?:?]
        at org.apache.el.parser.AstValue.invoke(AstValue.java:252) ~[jasper-el.jar:9.0.88]
        at org.apache.el.MethodExpressionImpl.invoke(MethodExpressionImpl.java:266) ~[jasper-el.jar:9.0.88]
        at com.sun.faces.facelets.el.TagMethodExpression.invoke(TagMethodExpression.java:105) ~[javax.faces-2.2.20.jar:2.2.20]
        at javax.faces.component.MethodBindingMethodExpressionAdapter.invoke(MethodBindingMethodExpressionAdapter.java:87) ~[javax.faces-2.2.20.jar:2.2.20]
        at com.sun.faces.application.ActionListenerImpl.processAction(ActionListenerImpl.java:102) ~[javax.faces-2.2.20.jar:2.2.20]
        … 66 more

Hi @Giridhar_Nasam ,

I advise that that you check out the following threads because they might be beneficial to your use case.

  1. System Administration for IIQ 8.4
  2. Upgrade path through IdentityIQ versions

Looks like you might have a broken DynamicScope object that is using a Filter.in expression without any value going into it. I’d start to see if you have any customized DynamicScope objects.

Thank you  @sunny_tsang , indeed it was the issue. After deleting one of the DynamicScope issue got resolved.