Configuration Guide › SiteMinder Integration › How Resources are Protected

How Resources are Protected

Advanced authentication requires you to use a SiteMinder Policy Server in your implementation.

In many situations, the application server hosting the Identity Manager Server is on a separate system from the one with the Web Server that proxies requests to the application server. To provide forwarding services, the Web Server needs the following:

• A plug-in that is provided by the application server vendor
• A SiteMinder agent to protect the CA Identity Manager resources, such as the User Console, Self Registration, and the Forgotten Password feature

The Web Agent controls the access of users who request CA Identity Manager resources. After authenticating and authorizing users, the Web Agent allows the Web Server to process the requests.

When the Web Server receives the request, the application server plug-in forwards it to the application server hosting the Identity Manager Server.

The Web Agent protects CA Identity Manager resources that are exposed to users and administrators.