Federation Manager Guide › SiteMinder Integration with Federation Manager › How to Integrate Federation Manager and SiteMinder

How to Integrate Federation Manager and SiteMinder

A deployed SiteMinder system can integrate with Federation Manager using the SiteMinder Connector, a software component included with Federation Manager. The Connector enables the following interaction between federation and web access management deployments:

• Establishing an identity to generate an assertion.

  At the asserting party, a user arrives at Federation Manager but has no session. The Connector communicates with SiteMinder to establish a SiteMinder session. Based on the contents of the SiteMinder session, the Connector creates a federation session. Using this session information, a SAML assertion is generated for the user.

• Establishing an identity for SiteMinder to determine authorization privileges.

  At the relying party, a user authenticates with Federation Manager and a federation session is generated. The Connector passes on the federation session with the user name to SiteMinder, which generates a SiteMinder session from the federation session. The user is now identified and is not rechallenged for credentials. SiteMinder determines the authorization privileges for the requested resources at the relying party.

The following figure shows the configuration process when integrating with the Connector:

Complete the following configuration steps:

1. Configure a policy to generate a SiteMinder session.
2. Configure the Connector settings.
3. Enable the Connector at the partnership level.