Affects Version/s: 11.0.4, 12.0.2, 13.0.0, 13.5.0
Steps to reproduce this issue in OpenAM 12.0.2..
Login to OpenAM Admin gui.
Configuration > Global > SAMLv2 SOAP Binding > New > Click cancel or fill in the details leads to the invalidURL error.
For the "Key" i used value "/pdp" and for "Class" I used "com.sun.identity.xacml.plugins.XACMLAuthzDecisionQueryHandler"
Per following URL, step # 3.https://backstage.forgerock.com/#!/docs/openam/12.0.0/dev-guide/chap-fedlet-java#try-fedlet-xacml-query
Workaround provided and verified that it worked by customer is as follows.
Go to Admin Gui:
Configuration -> Servers and Sites -> Default Server Settings -> Security -> Object Deserialisation Class Whitelist
Please Add a New Value
Save the changes.
Then try to add Key and Class value and you will not see the above issue.