Configuration Guides › Policy Server Configuration Guide › Introducing SOA Security Manager › SOA Security Manager Overview › SOA Security Manager Architecture and Components › SOA Agents › SOA Agent for Web Servers

SOA Agent for Web Servers

The SOA Agent for Web Servers is an XML-enabled version of the CA SiteMinder Web Agent. The SOA Agent can integrate with the following components:

• A web server to authenticate and authorize requests for access to web services bound to URLs served by that web server.
• A proxy server that handles requests for an application server to authenticate and authorize requests for access to web services hosted by the application server but associated with URLs served by the proxy server.

  Note: This approach is provided only to support upgraded TransactionMinder deployments that use it. For more advanced use cases, we recommend use of a compatible XML gateway solution.

The SOA Agent recognizes requests that meet the following criteria as web service requests for SOA Security Manager to handle:

• Agent action—POST; all XML message requests are posted. However, SOA Security Manager also provides two other agent actions, ProcessSOAP and ProcessXML, that allow you to create rules that fire for posted requests according to the XML message format.
• Message MIME type—text/xml by default; configurable using the XMLSDKMimeTypes Agent parameter.

All other requests are handled using the core Web Agent functionality of the SOA Agent, letting you also protect other resources on a web server, if you have purchased CA SiteMinder.

Note: For more information about protecting web resources using CA SiteMinder, see the CA SiteMinder Web Agent Configuration Guide.