Configuration Guides › Policy Configuration Guide › Responses and Response Groups › Variable Objects in Responses › Configure a Response Attribute that Contains a Variable

Configure a Response Attribute that Contains a Variable

A response can contain one or more response attributes whose values are determined by variable objects. Each response attribute contains one variable object. Each variable object is a name-value pair. The name of the variable object is used to look up the value of the variable object at runtime. SOA Security Manager passes the resulting name-value pair to the Web Agent.

To configure a response attribute that contains a variable

1. Follow the instructions in Configure a Response to create a response.
2. Select SiteMinder and Web Agent as the Agent Type on the Attributes group box.
3. Click Create Response Attribute on the Attribute List group box.

   The Create Response Attribute pane opens.

4. Select a response attribute from the drop-down list on the Attribute Type group box.
5. Select the type of response attribute on the Attribute Kind group box.
6. Type the name of the variable object in the Variable Name field on the Attribute Fields group box.

   Note: When this field is required, SOA Security Manager passes this name to the Web Agent in the form of a name-value pair.

7. For the selected response attribute type, complete the following fields on the Attribute Fields group box:
   • Static

     Specify the value of the static variable in the Variable Value field.

   • User Attribute

     Specify the name of the user attribute in the Attribute Name field.

   • DN Attribute

     Specify the DN of the user or user group in the DN Spec field and the name of the user attribute in the Attribute Name field.

     (Optional) Click Lookup to search for and select one set of users or user group in a specified user directory.

     (Optional) Select the Allow Nested Groups checkbox.

   • Active Response

     Specify the name of your library, the name of a library function, and optionally the names of parameters in the Library Name, Function Name, and Parameters fields.

     Note: Your library must be based on the SiteMinder Authorization API.

   • Variable Definition

     Click Lookup to select an existing variable object for the Variable field.

   Note: SOA Security Manager uses the information that you provide in the fields on the Attribute Fields group box to determine the value that it passes to the Web Agent in the form of a name-value pair.

8. Click OK.

   The response attribute is saved.