Configuration Guide › CA SiteMinder Integration › How to Protect CA Identity Manager with SiteMinder › Install the SiteMinder Web Agent

Install the SiteMinder Web Agent

You can use a SiteMinder Web Agent or a Web Agent Group to protect CA Identity Manager resources. For supported Web Agent versions, see the CA Identity Manager support matrix on the CA Support Site.

Note: For more information about Web Agent groups, see the CA SiteMinder Policy Server Configuration Guide.

Verify that the following requirements have been met before installing the Web Agent:

• The SiteMinder Policy Server is installed and configured.
• The system that hosts the Web Agent has network access to the Policy Server.
• The Web Server that hosts the Web Agent is running.

The following table lists the steps to install and configure a SiteMinder Web Agent:

Important! CA Identity Manager now uses a new CA styles EAR. To support this update, change the web server plug-in that is used to forward to the application server. To change the web server plug-in, add a redirection to /castylesr5.1.1 in addition to /iam in the http proxy forwarder.

To use the SiteMinder Web Agent to protect CA Identity Manager, select the Web Agent when you create an Environment.

Note: You do not need to create any additional SiteMinder objects to use the SiteMinder Web Agent.

To verify the Web Agent, confirm the following points:

• The SiteMinder Policy Server Authentication and Authorization logs verify that the Web Agent starts properly.
• The Agent log for the Web Agent verifies that the Web Agent starts properly.

Install the Web Proxy Server Plug-in

Based on which application is installed, the identity administrator installs one of the following plug-ins that the web server uses to forward requests to the application server:

• WebSphere
• JBoss
• WebLogic