Configuration Guide › SiteMinder Integration › How Resources are Protected

How Resources are Protected

Advanced authentication requires you to use a SiteMinder Policy Server in your implementation.

In many situations, the application server hosting the CA Identity Manager Server is on a separate system from the one with the Web Server that proxies requests to the application server. To provide forwarding services, the Web Server need:

• An application server vendor provided plug-in.
• A SiteMinder agent to protect the CA Identity Manager resources, such as the User Console, Self Registration, and the Forgotten Password feature.

The Web Agent controls the access of users who request CA Identity Manager resources. Once the users are authenticated and authorized, the Web Agent allows the Web Server to process the requests.

When the Web Server receives the request, the application server plug-in forwards it to the application server hosting the CA Identity Manager Server.

The Web Agent protects CA Identity Manager resources that are exposed to users and administrators.