Description

An administrator may want to remove the configuration under #security idp, but every time they go to delete it, it is not deleted, even though a show|compare shows that it will be deleted.

Symptoms

An administrator cannot delete IDP policies configured under #security idp .  Despite show|compare showing that it will delete it. After deleting it, the IDP configuration is still present.

Solution

This is due to the templates.xsl system script being in place. With it present, whenever a configuration is committed, it will install the configuration for those pre-defined templates for IDP.

The solution is to mark the system script as inactive or to delete it. To delete the system script and delete security IDP, enter the following:

delete system scripts commit file templates.xsl
delete security idp
commit


To inactivate the script and delete the IDP config, enter the following:

deactivate system scripts commit file templates.xsl
delete security idp
commit