Agent Guide › Configuring Policies for the SiteMinder Agent › Configure Authentication and Authorization Responses

Configure Authentication and Authorization Responses

The SiteMinder Agent makes responses available for use in J2EE components. Responses pass user attributes, DN attributes, static text, or customized active responses from the Policy Server to the SiteMinder Agent. The Policy Server returns the following two responses:

Authentication Responses

During authentication, these Policy Server responses are returned to the SiteMinder Agent, which then attaches them to the SiteMinder Principal for use by resources in both containers such as Servlets, JSPs in their corresponding J2EE applications, and by EJB container resources.

Authorization Responses

During authorization, these Policy Server responses are returned to the SiteMinder JACC Provider, which places them in an HTTP request attribute for use with HTTP requests only; they are not attached to the SiteMinder Principal. Authorization responses are not therefore available for use with EJB container requests.