openam-samples/sample-trees/src/main/resources/root/AuthTree/Facebook-ProvisionIDMAccount.json has this content for the "ProvisionIdmAccountNode" entry:
Testing showed that this doesn't actually work. The auth tree dies following IDM registration, for reasons that are not at all clear (no error messages logged anywhere indicating why).
Use the sample auth tree to try to register with IDM, and try to have the tree continue to a successful session.
Login occurs following registration.
Login fails with unhelpful error message and no useful log details.
The ProvisionIdmAccountNode extends SingleOutcomeNode; SingleOutcomeNode defines its one outcome as "outcome", not "true". When I change the sample to use "outcome", like so:
Then things work as expected.