Agent Guide › Troubleshooting › Identity Obtained by TAI Not Propagated to WebSphere

Previous Topic: SiteMinder TAI Forms Authentication Scheme Failures

Next Topic: SiteMinder Agent Initializes but WebSphere Challenges Security

Identity Obtained by TAI Not Propagated to WebSphere

Signing in to the Web Agent is successful, but the identity is not propagated to WebSphere (SiteMinder TAI module seems to have initialized successfully, but when you authenticate with the Web Agent, WebSphere does not recognize you).

Possible Cause

Solution

No native security constraint against the WebSphere resource.

The SiteMinder TAI is not triggered unless a security constraint is issued against the URL that is being accessed. Review the Web deployment descriptor (web.xml) to determine the security constraints in the application.

The Assertion realm might not be protected if the challengeforcredentials parameter is set to NO.

The resource might not be protected if the challengeforcredentials parameter is set to YES.

Determine the setting for the parameter.