CA Identity Governance Configuration Guide › Authentication Options › Single Sign-On (SSO) with CA SiteMinder®

Single Sign-On (SSO) with CA SiteMinder®

You can use CA SiteMinder® to support the Single-Sign-On (SSO) function for CA Identity Governance Portal users.

Users log in to a CA SiteMinder® environment and are authenticated once. Users then have access to additional systems without being prompted to log in again at each site. CA SiteMinder® maintains user credentials and a list of active sessions.

To implement SSO in the CA Identity Governance server environment, you must have the following CA SiteMinder® components:

• CA SiteMinder® Policy Server - This server authenticates CA Identity Governance users and returns information that identifies the user account in the CA Identity Governance Portal. Typically you implement SSO using an existing CA SiteMinder® Policy Server in the network environment.
• CA SiteMinder® Web Agent - This agent intercepts user requests that are sent to the CA Identity Governance Portal and authenticates CA Identity Governance Portal users. Install the Web Agent on an HTTP server or cluster that is compatible with CA SiteMinder® and sized to handle portal traffic. We recommend that you use the Apache HTTP server. You can use an existing CA SiteMinder® Web Agent, or you can install the agent on an HTTP server or a CA SiteMinder® compatible cluster.

When you implement SSO, a CA SiteMinder® Web Agent intercepts user requests submitted to the CA Identity Governance server, and queries the CA SiteMinder® Policy Server to authenticate the user. The Policy Server returns user credentials that enable the CA Identity Governance server to identify the user in the local portal users file.

The CA Identity Governance and CA SiteMinder® servers are typically located behind enterprise firewalls, and the HTTP server with the CA SiteMinder® Web Agent is exposed to the public network.

The following diagram illustrates the CA SiteMinder® and SSO interaction:

Note: For more information about CA SiteMinder® implementation and configuration, see the CA SiteMinder® Policy Server Configuration Guide, the CA SiteMinder® Web Agent Configuration Guide, and other relevant portions of the CA SiteMinder® documentation.

The following diagram illustrates how to implement SSO with CA SiteMinder®:

Follow these steps to implement SSO with CA SiteMinder®:

1. Review SSO prerequisites.
2. Define CA Identity Governance system properties.
3. (Optional) Define CA Identity Governance SSO system properties.
4. (Optional) Configure SSO HTTP response headers.
5. (Optional) Login to CA Identity Governance with SSO.