Previous Topic: Installation ConsiderationsNext Topic: Known Issues


General Considerations

This section contains the following topics:

Policy Management API

SSO Support in Custom Agents

Custom Agents and SiteMinder 12.52

LDAP SDK Integration

Policy Management API

Significant changes to the Policy Management API occurred beginning with SiteMinder v4.5—for example, the introduction of the OID as an object’s unique identifier, and the addition of functions such as Sm_PolicyApi_Init() and Sm_PolicyApi_Release().

Developers who continue to use Policy Management APIs from a release prior to SiteMinder v4.5 should refer to the documentation that accompanied the earlier release. Further:

SSO Support in Custom Agents

When enabled with single sign-on support, custom agents can accept the SMSESSION single sign-on cookie that is created by a standard SiteMinder Web Agent of a previous release.

To accept an SMSESSION cookie created by a custom agent, the Web Agent must be upgraded to at least:

QMR

Supported SiteMinder Agent

4.x QMR4

SiteMinder v4.x Agents

5.x QMR1

SiteMinder v5.x and v6.x Agents

To enable a SiteMinder v4.x, v5.x, or v6.x Web Agent with the appropriate QMR upgrade to accept SMSESSION cookies created by a custom agent, the Web Agent configuration file (LocalConfig.conf with IIS servers or WebAgent.conf with other servers) or central configuration object (for v5.x or higher) must contain the following entry:

AcceptTPCookie="yes"

Set AcceptTPCookie as follows:

Custom Agents and SiteMinder 12.52

When you build a custom agent with SDK 12.52, you can run the custom Agent only against v6.0 up through r6.0 SP 5, and r12 Policy Servers.

Agents built with the SiteMinder Agent API from SDK 5.5 can be used with SiteMinder Policy Servers v5.x and v6.0 up through r6.0 SP 5.

LDAP SDK Integration

Beginning with CA SiteMinder® r12.5, the Policy Server is integrating with the Mozilla LDAP SDK for C SDK, version 6.0.7 (version 6.0.4 for HP-UX). If your custom code had been linked with an older version of the LDAP SDK, link with the new SDK. Older versions were named the iPlanet Directory SDK, or the Netscape LDAP SDK.