Single Sign-On Service › SSO Policy Server Configuration Guide › Responses and Response Groups › How SiteMinder Processes Responses

How SiteMinder Processes Responses

The following diagram illustrates how CA SiteMinder® uses responses when processing a user’s request for resources.

In the previous diagram, CA SiteMinder® processes responses using the following steps:

1. A user requests a resource that is protected by a CA SiteMinder® Agent.

   The In Buffer represents the Web Server buffer where the requested URL, Post data or query strings reside during Web Server processing.

2. The CA SiteMinder® Agent intercepts requests for protected resources, and communicates with the Policy Server to authenticate and authorize the user.

   Part of the authentication process binds the user to a record in a user directory.

3. The Policy Server uses the binding to retrieve attributes specified in a CA SiteMinder® response from the user’s entry in the user directory.
4. The Policy Server passes user attributes specified in the response back to the Web Agent.
5. The attributes returned to the Web Agent may be used by a servlet or application that has been customized to use the attributes specified in the response.

   The servlet or application executes its processes and passes its results to the Web Server.

6. The Web Server’s Out Buffer contains the resulting information that must be returned to the user.
7. The Web Agent adds any CA SiteMinder® specific information to the Web Server’s Out Buffer.

   The Web Agent may pass any of the following to the Out Buffer: CA SiteMinder® cookies, URLs for redirection, and successful /unsuccessful authentications or authorizations.

8. The Web Server passes the contents of the Out Buffer to the user.

Response Types

A response is a container for one or more response attributes. The response attributes are what a CA SiteMinder® Agent receives after the Policy Server processes a response. The available response attributes differ based on the type of response.

The following types of responses are available:

• Web Agent responses
• RADIUS responses.

Note: You can create response types for custom Agents and response attributes using the CA SiteMinder® APIs, which are available separately with the Software Development Kit. More information exists in the API Reference Guide for C.

Web Agent Responses

Web Agent responses are CA SiteMinder® responses that provide name/value pairs usable by a CA SiteMinder® Web Agent. These responses can contain attributes for HTTP header variables, cookie variables, and URLs for redirections.

Affiliate Agent Responses

Affiliate Agent responses are CA SiteMinder® responses that provide name/value pairs usable by a CA SiteMinder® Affiliate Agent. These responses can contain attributes for HTTP header variables or HTTP cookie variables.

More information:

Affiliate Agent Response Attributes

RADIUS Responses

RADIUS responses are CA SiteMinder® responses that provide values usable by a RADIUS Agent. These responses can contain response attributes for all supported RADIUS attributes.

More information:

RADIUS Agent Response Attributes

Response Attributes

Each CA SiteMinder® response contains one or more response attributes. These attributes differ based on the type of response. The following sections discuss the response attributes that are available for each type of response.