Administration Guide › Security Zones on SPS › Parameters for Security Zones

Parameters for Security Zones

The two single sign-on parameters listed following are manually added to the Web Agent configuration objects in the policy store. These settings can also be used in local configuration files and are added to the sample local configuration files laid down during installation.

SSOZoneName

Specifies the (case-sensitive) name of the single sign-on security zone a Web Agent supports. The value of this parameter is prepended to the name of the cookie a Web Agent creates. When this parameter is not empty, SiteMinder generates cookies using the following convention: ZonenameCookiename. The default is empty and uses SM as a zone name, which gives the cookies the following default names:

• SMSESSION
• SMIDENTITY
• SMDATA
• SMTRYNO
• SMCHALLENGE
• SMONDENIEDREDIR

Example: Setting the value to Z1 creates the following cookies:

• Z1SESSION
• Z1IDENTITY
• Z1DATA
• Z1TRYNO
• Z1CHALLENGE
• Z1ONDENIEDREDIR

SSOTrustedZone

Defines an ordered (case-sensitive) list of trusted SSOZoneNames of trust for a single sign-on security zone. Use SM to add the default zone if necessary. Agents always trust their own SSOZoneName above all other trusted single sign-on zones. The default is empty, or can be SM or the SSOZoneName if provided.