Previous Topic: Configure Single Sign-On from CA SSO to SiteMinderNext Topic: Configure an smauthetsso Custom Authentication Scheme


Configure an smetssocookie Web Agent Active Response Attribute

The smetssocookie Web Agent active response generates and sends an SSO cookie to a Web browser. The SSO cookie lets a CA SiteMinder®-authenticated user access WAC or CA SSO protected content without having to reauthenticate.

Follow these steps:

  1. Click Policies, Domain.
  2. Click Responses.
  3. Click Create Response.
  4. Select a domain from the list and click Next.
  5. Define a Name and Description for the response.
  6. Verify that the CA SiteMinder® is selected and that Web Agent appears in the Agent Type list.
  7. Click Create Response Attribute.
  8. Verify that Create a new object is selected, and then click OK.
  9. Select WebAgent-HTTP-Cookie-Variable from the Attribute list.
  10. Select Active Response in Attribute Kind.
  11. In the Cookie Name field, type SSOTK.
  12. In the Library Name field, type smetssocookie.
  13. In the Function Name field, type GenEtssoCookie.

    Note: The function name is case-sensitive.

  14. In the Parameters field, define the following tokens:

    <CA_PS_Host_Name>;<SSO_Auth_Host>;<SSO_AuthMethod>;<EncryptionKey>

    CA_PS_Host_Name

    Specifies the host name of the CA SSO Policy Server.

    SSO_Auth_Host

    Specifies the SSO authentication host name in the CA Policy Manager. You can specify this host name by going to Web Access Control Resources, Configuration Resources, Authentication Host.

    Required value: SSO_Authhost

    SSO_AuthMethod

    Defines the SSO authentication method.

    Required value: SSO

    EncryptionKey

    Defines the ticket encryption key for the SSO authentication host name in the CA Policy Manager.

    Note: To improve legibility, you can type a space before and after any token.

  15. Click Submit.
  16. Click Finish.

    The response can be added to an OnAuthAccept rule.