Configure CA SiteMinder® as a SAML 1.x Consumer

This section contains the following topics:

For CA SiteMinder® to serve as the relying partner, complete following tasks:

Install the Policy Server.
Install one of the following components:
- The Web Agent and the Web Agent Option Pack. The Web Agent authenticates users and establishes a CA SiteMinder® session. The Option Pack provides the Federation Web Services application. Be sure to deploy the FWS application on the appropriate system in your network.
- The SPS federation gateway, which has an embedded Web Agent and has the Federation Web Services application on the embedded Tomcat web server.
For more information, see the Web Agent Option Pack Guide.
Private keys and certificates are imported for functions that require verification and encrypting of messages.
An asserting partner is set up within the federated network.

Configuring CA SiteMinder® as SAML 1.x consumer requires the following tasks:

Complete the SAML 1.x authentication scheme prerequisites.
Select the authentication scheme type and assign it a name.
Specify the namespace for users being authenticated with the SAML 1.x authentication scheme.
Select the single sign-on profile that this consumer supports (artifact or POST).
Configure a SAML authentication scheme for each Producer that is a federation partner and generates assertions. Bind each scheme to a realm. The realm must contain the target URLs for federated resources. Protect these resources with a CA SiteMinder® policy.

Tips:

Certain parameter values at the Producer and Consumer must match for the configuration to work. A list of those parameters is available in Configuration Settings that Must Use the Same Values.
Verify that you are using the correct URLs for the Federation Web Services servlets. The URLs are listed in Federation Web Services URLs Used in SiteMinder Configuration.

The following tasks are optional for configuring CA SiteMinder® as a consumer:

The Administrative UI provides two ways to navigate to the legacy federation configuration dialogs.

You can navigate in one of two ways:

Following a wizard to configure a new legacy federation object.
When you create an object, a page displays with a configuration wizard. Follow the steps in the configuration wizard to create the object.
Selecting tabs to modify an existing legacy federation object.
When you modify an existing object, a page displays with a series of tabs. Modify the configuration from these tabs. These tabs are the same as the steps in the configuration wizard.