Configuration Guides › Policy Server Configuration Guide › Authentication Schemes › SAML Session Ticket Authentication › Multistep Authentication Using SAML Session Tickets Without Signed XML Documents › How the Consumer Obtains the Assertion

Previous Topic: Multistep Authentication Using SAML Session Tickets Without Signed XML Documents

Next Topic: How the Consumer Uses the Assertion (Multi-step)
How the Consumer Obtains the Assertion

When a web service consumer makes a request for a web service, the web service consumer must get the assertion from the authentication service, which is protected by the SOA Agent. The assertion can be obtained using any method of authentication.

After the web service consumer is authenticated, the web service consumer goes through the authorization process. If the web service consumer is successfully authorized, the SOA Agent responds with a SAML Session Ticket assertion containing only an encrypted CA SiteMinder session ticket.