Previous Topic: Deploying Authentication ShimNext Topic: Deploying and Configuring SAML Sample Applications


Configuring CA SiteMinder Policy Server

To configure SiteMinder Policy Server to integrate with Adapter, perform the following steps (on the system hosting SiteMinder Policy Server). The steps documented here are for SiteMinder Policy Server version 12. If you are using a different version of the SiteMinder Policy Server, refer to the relevant SiteMinder Policy Server documentation.

  1. Create a new Authentication Scheme in the SiteMinder Policy Server administrative interface, as follows:
    1. Open SiteMinder Policy Server Administrative User Interface, click the Infrastructure tab, click Authentication, and then click Authentication Scheme.
    2. Click Create Authentication Scheme.
    3. In the Create Authentication Scheme screen, select Create a new object of type Authentication Scheme, and click OK.
    4. In the General section of the Create Authentication Scheme screen, do the following:
      • Specify a name and description for the new authentication scheme in the Name and Description fields respectively.
      • Select Custom Template from the Authentication Scheme Type drop-down list.
      • Specify a protection level. The protection level is enforced during single sign-on when the user tries to access resources protected by different authentication schemes.
      • Some authentication scheme types support Password Policies, while others do not. Select the Password Policies enabled for this Authentication Scheme check box, if you want the authentication scheme to support password policies.
    5. In the Scheme Setup section of the Create Authentication Scheme screen, do the following:
      • Enter the Adapter library file name as ArcotSiteMinderAdapter in the Library field.
      • Enter the name of the configured workflow in the Parameter field.

      Important! The value you enter in the Parameter field is case-sensitive and it must exactly match the "AFM Profile Name" that you have configured in the AFM wizard.

      Note: You must append the profile name with the installation_directory separated by a comma, for example [SectionName],[installation_dir]. There should not be any whitespace character between the section names and comma. For example, if your profile name is OnePage, then the Parameter field must be specified as OnePage,/opt/arcot. In addition, SectionName must match the AFM Profile Name that you specified using the Wizard.

    6. Click Submit to create the authentication scheme.
  2. Any realm that you wish to protect with Arcot authentication must be configured to use the new Authentication Scheme that you created in Step 1. Use SiteMinder Realm Dialog to perform this operation.
  3. For SiteMinder Policy Server to work with Adapter, set the parameters from the following table in the SiteMinder Agent Configuration Object Dialog screen.

Parameter

Value

CssChecking

Yes

FCCCompatMode

Yes

AgentName

Name of the agent.

LogFileName

Name of the Web Agent log file.

This is not a mandatory setting, but can be used for debugging.

DefaultAgentName

Name of the default Web Agent.

DefaultPassword

Web Agent password.

LogFileSize

Size of the Web Agent log file.

Logfile

Yes

RequireCookies

Yes

TraceConfigFile

Name of the trace configuration file.

This is not a mandatory setting, but can be used for debugging.

TraceFile

Yes

TraceFileName

Name of the trace file.

TraceFileSize

Size of the trace file.