CA Identity Manager Configuration Guide › CA CA SiteMinder® Integration › CA SiteMinder® Operations › How to Configure Access Roles › Access Roles in SiteMinder › How to Enable Access Roles in SiteMinder

How to Enable Access Roles in SiteMinder

The following steps assume that CA SiteMinder® already protects the application to which the access role grants access. For instance, assume that you are creating an access role for an application that CA SiteMinder® does not protect yet. In such case, see one of the following guides in the CA SiteMinder® bookshelf:

• For CA SiteMinder® 6.0 SP5, see the Policy Design Guide.
• For CA SiteMinder® 12.0 SP2, see the Policy Server Configuration Guide.

Note: To configure access roles in CA SiteMinder®, use the Policy Server User Interface, an applet–based application, instead of the CA SiteMinder® Administrative UI. In CA SiteMinder® 12, this applet is named the CA SiteMinder® Federation Security Services Administrative UI (FSS Administrative UI). You can install the FSS Administrative UI using the Policy Server installer.

To enable access roles in CA SiteMinder®, you complete the following high-level steps:

1. In the Policy Server User Interface, associate a user directory and a CA Identity Manager environment with a Policy Domain.
2. In the Policy Domain, create realms and rules (if they do not exist) corresponding to the resources to which the access role grants access.

   Note: For information about creating realms and rules, see one of the following guides in the CA SiteMinder® bookshelf:

   • For CA SiteMinder® 6.0 SP5, see the Policy Design Guide.
   • For CA SiteMinder® 12.0 SP2, see the Policy Server Configuration Guide.
3. Create a response to pass entitlement information to the resource.
4. Create a policy and associate it with the following objects:
   • The access role
   • The realms and rules you created in step 2.
   • The responses created in step 3.

   Note: For information on creating policies, see the Policy Design Guide (for CA SiteMinder® 6.0 SP5) or the Policy Server Configuration Guide (for CA SiteMinder® 12.0 SP2).