CA EEM Getting Started › Integrating With CA SiteMinder › How You Integrate CA SiteMinder with CA EEM

How You Integrate CA SiteMinder with CA EEM

To integrate CA SiteMinder with CA EEM, perform the following in CA SiteMinder Administrator:

• Create an agent in CA SiteMinder for communication between CA EEM and CA SiteMinder policy server. Ensure the agent supports 4.x agents.
• Create an administrator or use the existing default administrator "SiteMinder" with system level scope.
• Create a CA SiteMinder User Directory for authorization, which is used by CA EEM to retrieve LDAP attributes.
• Set the UniversallD field to uniquely identifies a user in the directory such as sAMAccountName or UID. You can set the UniversalID from the SiteMinder UI, User Directories, Properties, User attributes tab.
• Set the Password Attribute (RW) on the User Attribute tab to userPassword.
• Create a CA SiteMinder data store for authentication, which is used by CA EEM to authenticate users.

  Note: If the authentication and authorization user store is same, use the existing user store created for authorization.

• Create a Realm with the Resource Filter as “/iamt.html”.
• Create a CA SiteMinder domain and add the User Directories, administrator, and Realm to the domain.

For more information about CA SiteMinder, see the CA SiteMinder documentation.

Configure CA EEM Server-side Logging for CA SiteMinder Modules

To configure log level for CA SiteMinder integration

1. Create a file with the following contents, and save the file with the name sm_log.properties:

   #filename: sm_log.properties
   #set the default logging level for the root logger
   .level = INFO
   #set the default logging level for the logger name com.ca.eiam
   com.ca.eiam.level = ALL
   

2. Modify the log level for the com.ca.eiam logger in the sm.properties file to any of the following values:

   SEVERE

   Specifies a level for messages indicating severe failure.

   WARNING

   Specifies a level for indicating warnings.

   INFO

   Specifies a level for informational messages.

   CONFIG

   Specifies a level for static configuration messages.

   FINE

   Specifies a level for tracing information.

   ALL

   Specifies that all levels of messages are logged.

3. Save the file at the following location:

   Windows

   %IGW_LOC%

   Linux and UNIX

   /opt/CA/SharedComponents/iTechnology

4. Stop the iGateway service.
5. Open the iGateway.conf file from the location specified in Step 3, and add the following tags within the <JVMSettings></JVMSettings> tags:

   <Properties name="eiam.sm">
   <system-properties>java.util.logging.config.file=sm_log.properties</system-properties>
   </Properties>
   

6. Save and close the file.
7. Start the iGateway service.