CA Identity Manager Configuration Guide › CA CA SiteMinder® Integration › CA SiteMinder® Operations › How to Configure Access Roles › Access Roles in SiteMinder › Create a SiteMinder Response

Create a SiteMinder Response

Follow these steps:

1. Log in to the Policy Server User Interface.
2. Depending on your administrative privileges, do one of the following tasks:
   • If you have the Manage System and Domain Objects privilege:
     1. In the Object pane, click the Domains tab.
     2. Select the policy domain to which you want to add a response.
   • If you have the Manage Domain Objects privilege, select the policy domain to add a response in the Object pane.
3. From the menu bar, select Edit, <domain name>, Create Response.

   The CA SiteMinder® Response dialog opens (see Response Dialog).

4. Enter a name and description for the new response.
5. In the Agent Type group box, select the CA SiteMinder® radio button.
6. Select the Web Agent option from the drop-down list in the Agent Type group box and click Apply to save your changes.
7. Click Create.

   The CA SiteMinder® Response Attribute Editor dialog opens.

8. From the Attribute drop-down list, select the WebAgent-HTTP-Header-Variable response attribute.
9. In the Attribute Setup tab, select the User Attribute radio button.
10. In the Variable field, enter the name of the variable that passes to the application.

    For example, if you specify the variable TASKS, the following header is returned to the application:

    HTTP_TASKS

11. In the Attribute Name field, specify the response attribute as follows:
    • SM_USER_APPLICATION_ROLES[:application id1, application_id2, ...application_idn]--Returns a list of roles that are assigned to a user.
    • SM_USER_APPLICATION_TASKS[:application id1, application_id2, ...application_idn]

    SiteMinder-Generated Response Attributes provides more information.

12. Click OK to save your changes and return to the CA SiteMinder® Administration window.