Back to Bookshelf

• CA SiteMinder®
• Legal Notices
• Contact CA Technologies
• Release Notes
  • Policy Server Release Notes
    • Policy Server Release Notes
    • New Features in 12.52
      • Administrative UI New Look and Feel
      • Enhanced Session Assurance with DeviceDNA™
      • Enhanced User Disambiguation Using Windows and Kerberos Authentication
      • CA Directory Password Policy Control
    • Changes to Existing Features
      • Enhanced Application Policy User Interface
      • MS Passport Authentication Scheme Not Supported
      • SMPS Log Data Enhanced
      • Configuration Wizard No Longer Requires Microsoft SQL Server Administrator Account with Create Permission to Create if Schema is Present
      • Features Frozen Since the Previous Japanese Version 12.0.3
      • New Location of the Authentication and Authorization Web Services Scenario
    • Revised Guidance for the XPS Sweeper Utility
    • Operating System Support
    • Enhanced Domain Policies User Interface
    • System Requirements
      • Policy Server Requirements
        • Windows
        • UNIX
      • Administrative UI Requirements
        • Windows Stand–Alone Installation
        • UNIX Stand–Alone Installation
        • Windows Existing Application Server Installation
        • UNIX Existing Application Server Installation
      • Report Server Requirements
        • Windows
        • UNIX
    • Installation and Upgrade Considerations
      • Upgrade Information Page
      • System Locale Must Match the Language of Installation and Configuration Directories (169863)
      • Local Fonts and Packages Required to Support International Language Versions of CA SiteMinder® Installers
      • Java Virtual Machine Installation Error on Solaris can be Ignored (149886)
      • Administrative UI and Internet Explorer 9 (149209)
      • Installation Media Names
      • Password Policy Message and Active Directory
      • Customized Password Change Messages
      • Certificate Revocation List Issuer
      • Deprecated CA SiteMinder® Key Tool Options
      • Upgrading a Policy Store
      • Policy Server Upgrade Requirement for 12.5 GA and 12.5 CR1
      • Considerations for Upgrading r6.x to r12.x
      • Considerations for Existing LDAP User Directory Connections Over SSL
      • Considerations for Localized Installations
      • ETPKI Library Installation
      • Upgrading a Collocated Policy Server and Web Agent
      • Policy Server Upgrade Creates New Files
      • Connection Between PS on UNIX and SQL Server
      • Character Restriction for Passwords in Installations (72360)
      • Distributed CA Directory Server Policy Store
      • Importing Event Handler Libraries
      • MDAC Versions
      • Multi-Mastered LDAP Policy Stores
      • Multi–Mastered LDAP User Store Support Limitations (53677)
      • Compatibility with Other Products
      • Updated snmptrap File
      • Windows Considerations
        • DEP Error during Policy Server Installation
        • Windows Server 2008 System Considerations
        • Deploying CA SiteMinder® Components
      • Solaris Considerations
        • Solaris 10 Support
        • Errors in the SMPS Log due to a gethostbyname() Error (54190)
        • Upgrading a Solaris Policy Server (57935)
        • Report Server Required Patch Clusters
      • Red Hat Enterprise Linux AS and ES Considerations
        • Red Hat Enterprise Linux AS Requires Korn Shell (28782)
        • Excluded Features on Red Hat Enterprise Linux AS
        • Apache 2.0 Web Server and ServletExec 5.0 on Red Hat Enterprise Linux AS (28447, 29518)
        • Report Server Required Patch Clusters
    • General Considerations
      • IdentityMinder Object Support in Policy Stores (29351)
      • NTLM Authentication Scheme Replaced by Windows Authentication Scheme
      • Performance Issues Using SQL Query Schemes on Non-Unicode Databases (144327)
      • Unsupported Features
      • System Management Limitations
        • Pop-up Blockers May Interfere with Help
        • Registry Setting No Longer Required for Setting the Maximum Number of Connections (27442)
      • Policy Server Limitations
        • Leading Spaces in User Password May Not Be Accepted (27619)
        • Error Changing Long Password When Password Services is Enabled (26942)
        • Certificate Mappings Issue with certain Policy Stores (27027, 30824, 29487)
        • Handshake Errors with Shared Secret Rollover Enabled (27406)
        • Internal Server Error When Using SecureID Forms Authentication Scheme (39664)
        • X.509 Client Certificate or Form Authentication Scheme Issue (39669)
        • Certain User Name Characters Cause Authenticating or Authorizing Problems (39832)
        • DEBUG Logging With SafeWord Authentication Causes Policy Server to Fail (42222, 43051)
        • Active Directory Integration Enhancement For LDAP Namespace (43264, 42601)
        • Policy Server Does Not Support Roll Over of Radius Log (44398) (43729) (42348)
        • smnssetup Tool Deprecated (44964) (45908) (46489)
        • Option to Create Copies of Existing Policy Server Objects
      • User Directory Limitations
        • ODBC User Store Failover
      • Perl Scripting Interface Limitations
        • Perl use Statement for PolicyMgtAPI Must Come Before Use Statement for AgentAPI (24755)
        • Methods that Return Arrays May Return undef in a One-Element Array (28499)
        • Perl Scripting Interface and Multi-valued Agent Configuration Parameters (37850)
      • Japanese Policy Server Limitations
        • Agent Shared Secrets are Limited to 175 Characters (30967, 28882)
    • Known Issues
      • Administrative UI Contents Not Displaying Properly (176842)
      • Post Processing Chain Value Causing OpenID Authentication Failure (174220)
      • Internet Explorer 9 Requires Compatibility View
      • Policy Server Configuration Fails if the Supplied Database Name Contains Japanese Characters (165423)
      • Policy Server Management Console Cannot Connect to an Audit Store with a Multi-Byte Character Database Name (UNIX) (167772)
      • OpenID Authentication Scheme Usability Issue (151046)
      • Administrative UI Behavior Confusing After Inactivity Timeout (171765)
      • Cannot View Reports if Report Server Connection is Established Using an IP Address (167987)
      • ASA Agents Can Enable TCP/IP Keep-Alives
      • Policy Server Can Terminate When Using Novell eDirectory as the Policy Store (175150)
      • Error Message When Installing the Reports Server on Red Hat Linux 6 32-bit System (169884)
      • SAML1.1 Partnership Artifact Transaction Fails With Delegated Authentication
      • RSA SecureID Auth Scheme Not Supported in FIPS Mode
      • DSN Names with Non-ASCII Characters Not Supported
      • AttributeType Not Registered Error in the Administrative UI Log
      • Cannot Specify Non-English Path to Install Administrative UI
      • Local Characters in 4.x Agent Names Not Supported in the FSS Administrative UI
      • Objects that Support Only English-Language Characters
      • The smldapsetup Utility Fails
      • Report Without Data (145002)
      • First Tab in Group Appears in Administrative UI When Switching from View to Modify (146508)
      • OCSPUpdater Does Not Support the SHA-224 Algorithm (150477,150474)
      • smpolicysrv_snmp.log Not Generated (147959)
      • Report Server Configuration (150327,119313)
      • Browser Refresh and Back Buttons Cause Resubmission of Data (149633)
      • Agent Discovery and IIS Web Agents (134318)
      • Uninstalling the Report Server Leaves Files and Registry Entries
      • Cache Time Limit while Creating a Response Attribute
      • Active Directory Synchronization (115248)
      • Windows Server 2008 System Considerations
      • Oracle RAC Propagation Window Results in CA SiteMinder® Errors
      • Policy Server may Fail to Insert Audit Events into the Audit Database
      • Policy Server Performance with a Sun Java System Directory Server EE Policy Store
      • Sun Java System Directory Server EE Logs Warn that the Search is Not Indexed
      • Searches for Many Policy Objects (63721)
      • XPSExport Creates Read Only File (65035)
      • Windows LDAP Driver Version and FIPS Support
      • Reports and CA SiteMinder® Performance
      • IPv6 ODBC Data Sources
      • Searching CertSerialNumbers in a Custom Certificate Mapping Fails (59352)
      • Mixed Certificate-Based Authentication Schemes (27997)
      • Password Change Fails if UserDN Equal to or Greater than 1024 Characters (52424)
      • Passwords for User Accounts Stored in Active Directory cannot be Locked (48125)
      • Linux Policy Server Does Not Delete Oracle Session Store Sessions (39143)
      • Single Logout Services Log Errors if ODBC/SQLError Component Enabled (41324)
      • Manually Create the webadapter.properties File (72353)
      • Edit or Delete Responses and Response Groups
      • Enterprise Policy Management (EPM) Limitations
      • Password Change Behavior with Active Directory (AD) User Stores (82607)
      • Policy Analysis Reports Return No Results (82275)
      • Application Resources Dialog Topic in Administrative UI Help Has Incorrect Statement Regarding Wildcard Characters (179031)
      • Oracle Issues
        • Administrative UI and Oracle Policy Store Objects (65782)
        • SiteMinder Query Timeout and Oracle User Directories (68803)
      • Policy Server Issues
        • Policy Server May Fail to Start due to a Dynamically Updated system_odbc.ini File (55265)
        • Error Message Appears When Starting the Policy Server (127332) (135676)
      • Solaris Issues
        • Password Screen does not Prompt for Multiple SafeWord Authenticators (56766)
        • Federation Encryption Issue with JCE on Solaris (71293)
        • OAuth and OpenID Authentication Scheme Problems on Solaris (167716)
      • Advanced Password Services (APS) Issues
        • APS Uses Unsafe Functions on Windows Server 2008
        • APS Client Components Must Be Configured as 4.x Agents Which Do Not Support IPv6 Addressing (167337)
    • Defects Fixed in 12.5
      • WebLogic Agent Failed to get DMS Group Membership Details (CQ155207)
      • The Web Service Variable not Encoding Ampersands in Nested Variables (CQ151736)
      • Web Service Variable resolution HTTP Thread not Closing Sockets (CQ154111)
      • ServerHeartbeat Thread Crash (CQ156277)
      • Policy Server Hung When Connection Limits Exceeded (CQ157598)
      • FSS Administrative UI not Authenticating External Administrators Whose Passwords Contain Ampersands (CQ157596)
      • MaxThreadCount Does not Accept Values Above 10 (CQ153043)
      • UseSecureCookies Parameter and Advanced Password Services (CQ153055)
      • Administrative UI and FSS Administrative UI inconsistencies in 12.0.3.9 Regarding Host Configuration Object - Clusters (CQ160633)
      • Running Policy Server 12SP3CR09 on Policy Store 6.0SP5CR09, Policy Server crash randomly (CQ158841)
      • OneView is showing inconsistent values for HItRate (CQ155300)
      • Incorrect ServletExec Reference (161421)
      • SQL Server Authentication Information for Report Servers (161427)
      • Extending Policy Store Schema Documentation (161413)
      • Policy Store Upgrade Documentation (160518)
      • RadiantOne Incorrectly Listed as Supported
      • MySQL File Location Incorrect (159256)
      • Administrative UI Deletes Users from Policy Objects When Modifying Realms or Policies After Importing r6.x Policy Store (157701)
      • Boolean User Directory Attribute Mappings in Application Object Roles Fail (154130)
      • CA SSO (smauthetsso) Custom Authentication Scheme Fails in FIPS Mode on Windows (150671/164657)
      • Dead Lock Condition in the LDAP Authentication Layer (162301)
      • Host Registration Fails Using smreghost Fails When Pointing to an r6.x Extended Policy Store (164607)
      • Kerberos Authentication Fails for Users With a Large Number of Group Memberships in Active Directory (154373/164659)
      • OpenID Authentication Fails When Multiple User Directories are Configured in a Domain (162951)
      • Policy Server Cannot Authenticate Users from User Directories with Password Policies Using an r6.x Policy Store (160138)
      • Policy Server Configuration Wizard Fails When Using Drives Other Than C: on Windows (153459)
      • Policy Server Configuration Wizard Shows the Incorrect Minimum Required JDK/JRE Version (157948)
      • Policy Server Does Not Properly Protect Resources When Using an r6.x Extended Policy Store
      • Policy Server Exits Abnormally on Linux When Identity Manager Integration is Enabled (151725/150968)
      • Policy Server Installer Fails to Configure IPlanet Web Server/ASF Apache for FSS UI During Installation (155738)
      • Policy Server Installer Hangs When Encryption Key Contains Dollar Sign ($) Characters (160825)
      • Policy Server Race Condition Prevents Updates to Agent Configuration Objects Using the Java Policy Management API (154521/164660)
      • XPSDDInstall Abnormally Terminates When Upgrading from r12 SP3 to r12.5x Policy Server (158655)
      • FSS Applet UI Did Not Launch in RH5 [157387]
      • FSS UI Does Not Allow More Than 10 IP Addresses in a Policy Definition (158631/163943)
      • Authorization Fails for Users in ODBC Directories Configured With UNION-based Query Schemes (159354)
      • Policy Server Cannot communicate over SSL with LDAP Directory Servers That Specify an AKI (Authority Key Identifier) Attribute in the Certificate (160293/164029)
      • Administrative UI and smkeytool Fail to Properly Import and Store Certificates Over 1024 Characters to Active Directory Policy Store (160848)
      • Policy Server Configuration Wizard Breaks the FSS UI on Windows on Windows 2008/Windows 2008 R2 (157938)
      • Policy Server Abnormally Terminates Processing OnAuthAttempt Rules Bound to an Application Object (161793)
      • Policy Server Fails to Authorize Users in Active Directory if Load Balancing is Configured in the Administrative UI (160607)
    • Defects Fixed in 12.51
      • Administrative UI Localization Strings Missing [148680]
      • More Than One Way Is Available to Locate a Web Page within a Set of Web Pages [149533]
      • Hostname Missing in CA SiteMinder® Trace Logs [151003]
      • HTTPSClient.java Truncates One Byte in Response [151370]
      • The Administrative UI Was Not Displaying the Failover Threshold Value [152997]
      • The Session Portion in the Anonymous Authentication Scheme Was Not Disabled in Firefox or Safari Browsers [154723]
      • Date in Activity-By-User Report Incorrect [153070]
      • The saml.namespace.prefix Did Not Change [153074]
      • The VEXIST Function Was Not Working [153135]
      • Policy Server Was Unable to Reestablish Connection with Database [153300]
      • Error Message When Saving SAML Authentication Schemes Following Upgrade (CQ153307)
      • Time Stamp Anomaly in Audit Logs [153382]
      • Policy Server R12 Sp3 Build 258 Solaris 10 Set-up Failure [153536]
      • Named Expressions Using Non-ASCII Characters Failed [153544]
      • Admin Applet Only Allows 10 IP Addresses in Policy [153776]
      • SAML Target with Query Parameter at Realm Failed [153791]
      • Event Viewer Error Occurred When SM r6sp6cr2 Policy Server Started Up [153912]
      • XPSCounter Was Not Working When a Connection to SSL Enabled UD (ODBC) [153920]
      • Accessing Agent Configuration Objects from the FSS UI Caused a Policy Server Failure [154104]
      • Policy Server Profiler Did Not Add Headers at the Start of a New Log [154520]
      • Missing TransactionID in Authentication Message in Policy Server Profiler Trace Logs [155208]
      • SMSAVEDSESSION Deleted After Access Resource Not Allow Impersonation [155736]
      • Auto-sweep Setting Would not Change to False (CQ157057)
      • Password Policy can Prevent RSA Ace/SecureID Password Change (157216)
      • Issue with Switching the LOG LOCAL TIME Registry [158101]
      • Policy Server in Mixed Environment Fails (158841)
      • One View Monitor Shows Null Pointer Exception [158990]
      • Bulk Loading Audit Records Fails on Oracle (161705)
      • PS Configuration Wizard Does Not Allow For Retry for LDAP Configuration [157947]
      • Kerberos Ticket in HTTP Header causes Authentication Failure (159208)
      • Cannot Create a Federation Partnership in the Administrative UI on Windows Server 2008 R2 with French Language Pack (159616)
      • Administrative UI and FSS UI Inconsistencies in Host Configuration Object - Clusters Configuration [159938]
      • SharePoint PeoplePicker Timeouts (CQ160259)
      • Policy Server Reports ODBC Error with Audit Store (161511)
      • Java Stack Trace Provided Sensitive Information [161676]
      • Enabling Secure Cookies
      • Cookie Issue: HttpOnly Flag Not Set [161680]
      • SAML Token Claim Did Not Include All Active Directory Groups [161738]
      • IBM Directory Server Referrals and SiteMinder
      • Policy Server Memory Consumption Increases during Policy Store Import (167569)
      • Administrative UI Allows Browser to Store and Autocomplete Password Field Contents (161675)
      • Administrative UI Susceptible to Clickjacking Attacks
      • Problem with AKI Attributes on Certificates (CQ164030)
      • Unable to Create a Search Query in the Administrative UI (165003)
      • Global Authorization Events and Anonymous Authentication (165663)
      • Cannot Create User Name with Special Characters
      • Policy Server Failed under Load of DoManagement Calls [168102/168994]
    • Defects Fixed in 12.52
      • Event Library File Documentation (178452)
      • Apache Process Aborts on Accessing login.fcc File (177053)
      • Create Partnership Drop-down Not Displaying Properly (176737)
      • Information to Upgrade r12 Policy Server is Unclear (176533)
      • Administrative UI Not Working After Upgrade (176504)
      • The Administrative UI Failed while Manipulating Federation Partnerships (175622)
      • Authorization Fails with EPM Application (175148)
      • Administrative UI Added an Extra Pair of Parenthesis on the LDAP Notation (174905)
      • The smkeytool Was Not Importing Two Files in R12.51 cr01 (174693)
      • Latin ISO Users in AD/AD LDS User Store Were not Able to Authenticate (174354/172053)
      • VLV Indexing on Some LDAP User Directories Causes SiteMinder Agent Group Lookups to Fail (174279)
      • Upgrade Results in Suddden Spike in CPU Usage (174236)
      • CA SiteMinder® Web Services Documentation (173173)
      • The Administrative UI Was Not Properly Localized (173072)
      • The Policy Server Was Randomly Failing (172992)
      • Wrong Location for jar files in shfedimport.sh (172882)
      • Using Custom Authentication Scheme Results in Memory Leak (172871)
      • Error in Authentication REST Interface Tag (172762)
      • Slow PS Response When Modifying ACOs (172272)
      • Identity Mapping Not Working (172128)
      • Web Agent or Web Agent Option Pack Failed to Start (172124)
      • Test Tool Basic Playback Mode does not work if Policy Server is running in FIPS only Mode (154109)
      • Error in Processing Active Expression
      • Exception When Editing Users in SAML SP Object
      • Administrative UI Console Was Missing Entire Section
      • Entity Type Changes from Remote IDP to Remote SP During Import (170262)
      • Missing Authentication Authorization Web Service Default Settings Template in Administrative UI
      • Policy Server not Rolling Logs (170020)
      • Bad Search Filter Error (169127)
      • Unable to Edit SQL Entry within a Policy
      • Default Values of ACO Parameters in Web Agent Configuration Guide Unclear (155294)
      • CA SiteMinder® Agent for JBoss Guide Provides Incorrect Directions for UNIX Environment Settings (165866)
      • List of Required Linux Libraries in Policy Server Installation Guide is Incomplete (169240, 169427)
      • The Policy Server Configuration Guide Contains Incorrect Information About Impersonation Scheme Prerequisites (PROD00172378)
      • Administrative UI Linux Prerequisite Information in Policy Server Installation Guide Needs Consolidation (171403)
      • Additional Information About Bulk Loading Audit Data ODBC Database Required in Policy Server Administration Guide (159529)
      • Addition of the OpenID Authentication Plug-in
    • Documentation
      • CA SiteMinder® Bookshelf
      • Release Numbers on Documentation
      • Command Line Scripting (CLI) Documentation
    • Platform Support and Installation Media
      • Locate the Platform Support Matrix
      • Locate the Bookshelf
      • Locate the Installation Media
    • Third–Party Software Acknowledgments
    • Accessibility Features
      • Product Enhancements
      • How to Configure the Accessibility Mode for the Administrative UI
        • Open the Administrative UI to Change Policy Server Objects
        • Pick an Administrator Type
          • Create an Administrator
          • Create a Legacy Administrator
        • Configure the Accessibility Mode for the Administrator
  • Web Agent Release Notes
    • Web Agent Release Notes
    • Operating System Support
    • New Features
    • Changes to Existing Features
    • Installation and Upgrade Considerations
      • System Locale Must Match the Language of Installation and Configuration Directories (169863)
      • Local Fonts and Packages Required to Support International Language Versions of CA SiteMinder® Installers
      • Java Virtual Machine Installation Error on Solaris can be Ignored (149886)
      • Forms Credential Collector (FCC) Does Not Allow Windows Authentication By Default
      • Windows Server 2008 System Considerations
      • Console Mode not Supported on Windows Operating Environments (CQ143654, 152120)
      • SiteMinder Web Agent for z/OS Limitations
    • Known Issues
      • Italian Local Character "ì" Is Not Accepted as Input During Console Mode Agent Configuration (164827)
      • Unattended Mode Web Agent Installation Produces "Bad string" Error Message on Non-English Locales (165426)
      • SAML 1.1 Artifact Transaction Failing with SSL Exception [167393]
      • Web Agent Installation on Non-English Locale
      • User Account Control Dialog Appears when Installing CA SiteMinder® Components (135417)
      • Add Agent Configuration Parameters for CA SiteMinder® Agent for IIS Manually (CQ 135135)
      • IPv6 Addresses Not Supported by Web Agents Configured as 4.x Agent Types (65071)
      • Web Agent Installation Fails on 64-bit Linux (63714, 62738)
      • Multiple obj.conf Files and nete-wa-config (18615, 56424)
      • Uninstall Program Displays Debug Information on z/OS Systems
    • Defects Fixed in 12.51
      • Web Agent returns a 500 Error (152352)
      • A 403 Error at a Specific URL [153975]
      • Agent for SharePoint 2010 Does Not Honor the TraceFileSize ACO Parameter [154214]
      • When the Cookie Provider Was Enabled, the OnReject-Redirect Response Was Not Triggered [154278]
      • Need Apache-based web agent to support "restart" option (CQ155242)
      • When Usiing NTLM Authentication, the Agent Set the Client IP to the IP of the Load Balancer [155778]
      • Agent Using an SDK Script to Update ACO Agentname Parameter Lost Its Configuration [155790]
      • Double Session Cookie [155893]
      • SNMP Trap Not Getting Generated When Using Hostname [156834]
      • IHS Agent on AIX Failed in a Reverse Search of the DNS [156848]
      • 32-bit Agent Configuration Wizard Was Unable to Detect 32-bit ASF Apache [157236]
      • SOAP Fault Response Not Returned on Unsuccessful Authentication [157653]
      • X-FRAME-OPTIONS Header at Website Level Did Not Display [158163]
      • ISAPI6WebAgent.dll Not Unloading Properly (CQ158451)
      • Global Idle Timeout Related Failure (CQ160868)
      • Installation Wizard fails to Create Agent Configuration File (161826)
      • Remote User Variable Not Populated in Integrated Mode (CQ162179)
      • Kerberos Error Handling Issue [162775]
      • Environment Script for Web Agent Generates Double Colons in the Environment Variables [163166]
      • 64-bit Web Agent Installer Fails [163221]
      • Switching from Persistent Realm to Anonymous Realm After Timeout Produced 500 Error (CQ163659)
      • IIS 7.x Application Pool Crash with R12 SP3 CR11 Agent on Windows 2008 [164089]
      • Agent Installation Failure on 64-bit Agent [164149]
      • The FWS Was Not Honoring the IdleTimeout for Pre-existing and Expired SMSESSION [165857]
      • Setting JRE in PATH Varaiable to Uninstall Agent (178969)
    • Defects Fixed in 12.52
      • Updating web.config File Stalls Site (176078)
      • User Re-challenged On Exceeding Cookie Limit (172356)
    • Documentation
      • Release Numbers on Documentation
      • CA SiteMinder® Bookshelf
    • Third–Party Software Acknowledgments
  • SDK Release Notes
    • SDK Release Notes
    • Operating System Support
    • System Requirements
    • Installation Considerations
      • System Locale Must Match the Language of Installation and Configuration Directories (169863)
      • Considerations for Localized Installations
      • Installation on Windows
        • Windows Server 2008 System Considerations
      • Installation on UNIX in GUI mode
      • Installation on UNIX in Console Mode
      • Unattended Installation on Windows
      • Unattended Installation on UNIX
      • Uninstallation of the SDK
    • General Considerations
      • Policy Management API
      • SSO Support in Custom Agents
      • Custom Agents and SiteMinder 12.52
      • LDAP SDK Integration
    • Known Issues
      • Installation of ETPKI Libraries
      • Patch Required for Custom Agents Running on HP-UX
      • Configuration Issue with the smpolicyapi Samplr on UNIX platforms
      • Hierarchical Realms Not Supported in the Java PM API
      • Constants Missing from Java Policy Management API (13348)
      • Attributes Terminated with a Space in Java (13712)
      • Extra ServerDef Object Created with Java AgentAPI.getConfig() (14841)
      • Java SmPolicyApiImpl.search() cannot search for a Domain Object (15133)
      • Sort Order in a Java SmDMSCurson Object Cannot Be Empty (15317)
      • General Password Validation Errors in C (16787)
      • Java Method getConfig() Fails on Windows (39780)
    • Defects Fixed in 12.52
      • Agent SDK Updated to Support SSO Zones (168974)
      • Failure of the createSession() Method in the SmSessionServer Class (171759)
      • Impossible to Modify the Description of an Object Using the SDK (170888)
    • Defects Fixed in 12.51
      • Incorrect Values in smreghost.sh file of 64-bit Java SDK (165718)
      • Application Server Agent fails to Reconnect to Policy Server (167819)
      • Policy Management API Performance Issues (169497)
      • Running C Sample Program with a 4.x Agent Requires Setting an Environment Variable [156186]
      • Decoding SSO Token Degrades Performance (159533)
      • Error when Customizing Validity Duration of SAML Service Provide Object (153929)
      • smtest Tool Errors when Run from the bin64 Directory (CQ162346)
      • IdentityMinder and SiteMinder Policy Server Connection Issue (CQ158253)
    • Documentation
      • CA SiteMinder® Bookshelf
      • Release Numbers on Documentation
  • Federation Release Notes
    • Federation Release Notes
    • New Features r12.52
      • Name ID Management Profile
      • SAML 2.0 Response to the SP on Authentication Failure
      • Single Sign-on to Office 365
      • Social Sign-on
      • Federation Use Cases for Partnership Federation
      • Log Enhancements to Aid Troubleshooting
      • Federation Transaction Process Flows
      • SAML 2.0 POST Binding
      • Certificate List Cross References Partnerships
    • Known Issues for Legacy and Partnership Federation
      • Federation Does Not Support the Cookie Provider (172511)
      • UTF-8 Characters in Federation Objects Causing Failures (179000)
      • Deployment of Federation Web Services Fails on JBoss 6.1 (174757)
      • Back Channel Processing Fails with Client Certificate Protection (168151, 168278, 169147, 168774, 169312)
      • Signature Wrapping Checks Impact Artifact SSO After Upgrade (168864)
      • OCSPUpdater Does Not Support the SHA-224 Algorithm (150477,150474)
      • Java Virtual Machine Installation Error on Solaris can be Ignored (149886)
      • Web Agent Option Pack on JBOSS Requires Workaround (147357, 149394)
      • Deploying Federation Web Services in JBOSS 5.1.x (150603)
      • CA SiteMinder® Federation does not Support Directory Mapping (147993)
      • SPS Federation Gateway in a Federation Deployment
    • Known Issues for Legacy Federation
      • Attributes Appear Truncated at the Relying Party (157913)
      • Unable to View Legacy Federation Objects in the UI (119335)
      • Filtered Packages for JBoss Container Require Changes (168893)
    • Known Issues for Partnership Federation
      • Metadata File Name is Incorrect During Metadata Export (172063)
      • SSO between CA SiteMinder® Federation and Microsoft Exchange Online (Office 365) Not Yet Available
      • Errors While Deploying affwebservices on WebLogic
      • Rename Localized Connector Library After Upgrade
      • Consistent Use of CONSUMERID or NAME in an Intersite Transfer URL Required (169724)
      • WSFED RP Entity with SAML 2.0 Token Type Not Supported (167916)
    • Defects Fixed in 12.51
      • Incorrect Agent Configuration Object Note in Web Agent Option Pack Guide (171005)
      • Single Log Out after a ForceAuthN request results in Session Errors (153740)
      • System Error after a CA SiteMinder® Upgrade (154892)
      • Tomcat 6 Reference Removed from Documentation (159125)
      • Query String Redirection for Delegated Authentication is Only for Testing (165475)
      • Prerequisite for ODBC User Directory Setup for Federation (157633)
      • Information Missing for the smfedexport Command Options (155515)
      • Protection Against XML Signature Wrapping Attacks (168098)
    • Defects Fixed in 12.52
      • Asserting Party Not Accepting ACS URL in an Authentication Request (170971)
      • decryptionkeyalias Option Missing for the smfedexport Tool (178702)
      • PS Exception When Retrieving Password (175936)
      • GetUserProp() Function Created a Policy Server Failure (174951)
      • SAML Response Error (172963)
      • Updates to the Web Agent Option Pack Guide (171546)
      • Wrong Recipient Selected for an Assertion (171113)
      • SAML SSO Failure (169294)
    • Documentation
      • CA SiteMinder® Bookshelf
      • Release Numbers on Documentation
    • Third–Party Software Acknowledgments
  • Web Services Security (formerly SOA Security Manager) Release Notes
    • Welcome
    • System Requirements
      • Operating System Support
      • Platform Support
      • SiteMinder WSS Agent Requirements
      • Windows Server 2008 System Considerations
    • Installation and Upgrade Considerations
      • Compatibility with Other Products
      • System Locale Must Match the Language of Installation and Configuration Directories (169863)
      • Host registration Fails When Policy Server Has a Link-Scoped IPv6 Address When Configuring SOA Agent on Linux (136734)
      • r12.1 SOA Agents and 12.52 SiteMinder WSS Agents Cannot Consume SAML Session Tickets Produced by the Other Agent Version (147478)
      • Windows Considerations
        • Windows Server 2008 System Considerations
        • Deploying CA SiteMinder® Components
      • Solaris Considerations
        • Required Operating System Patches on Solaris (24317, 28691)
      • Red Hat Enterprise Linux AS and ES Considerations
        • Apache 2.0 Web Server and ServletExec 5.0 on Red Hat Enterprise Linux AS (28447, 29518)
    • Known Issues
      • General Issues
        • CA SiteMinder® Web Services Security Fails To Generate WS-Security Headers Using RSA-OAEP Encryption
        • Signing Not Working for SAML Session Tickets in SOAP Envelope (74036)
        • Operation-Level Policy Changes Not Committed In Certain Situation When Configuring Application Policy From WSDL (69006)
        • Clicking Back Button in Secure Web Services from WSDL Wizard Sometimes Causes "Array Index out of range error -1" (72176)
      • Install Issues
        • Back Option Not Supported During Console Mode Install (74339)
        • Uninstaller Fails with Errors (66522)
      • SOA Agent for Web Servers Issues
        • SiteMinder WSS Agent for Web Servers Failover to Secondary Policy Server Slow
        • SiteMinder WSS Agent Configuration Wizard Fails Intermittently for IIS 7.x SiteMinder WSS Agent on Windows Server 2008 (142248)
      • SiteMinder WSS Agent for IBM WebSphere Issues
        • SiteMinder WSS Agent for IBM WebSphere Limitations
        • SiteMinder WSS Agent and SiteMinder Agent for IBM WebSphere Coexistence Limitation (61190)
        • mustUnderstand Attribute Limitation (61018, 60551)
        • XML Digital Signature Authentication Fails for Certain Payloads on SiteMinder WSS Agent for IBM WebSphere (60619)
        • SiteMinder WSS Agent Configuration Wizard Cannot Unconfigure SiteMinder WSS Agent for WebSphere (66204)
      • SiteMinder WSS Agent for Oracle WebLogic Issues
        • SiteMinder WSS Agent for Oracle WebLogic Limitations
        • SiteMinder WSS Agent Configuration Wizard Cannot Unconfigure SiteMinder WSS Agent for WebLogic (66204)
      • CA SiteMinder® Agent for JBoss Issues
        • Uninstaller Fails with Errors (87704)
        • XML Request Messages With Digitally Signed Envelopes or Headers Fail to Authenticate on JBoss 6.x (180005)
        • XML Digital Signature Authentication Sometimes Fails When Entire Document is Signed (141772)
        • Installer Throws Erroneous Error When Supplying JVM Location (137843)
      • CA SiteMinder® Web Services Security SDK Issues
        • Web Service Client API XMLDocument Class signWSDocument Method Fails With Uninitialized Keystore Exception (133785)
        • Web Service Client API XMLDocument Class signWSDocument Method Fails to Decode DER Format Certificates (133787)
        • Web Service Client API XMLDocument Class signDocument Method Produces XML Signatures with Unresolvable Reference URIs (133788)
        • Web Service Client API XMLDocument Class signDocument Method Throws a NullPointerException when Signing Non-SOAP XML Using an X.509 Certificate (133789)
    • Defects Fixed in SOA Security Manager Releases
      • Defects Fixed in r12.1 SP3
        • Authentication of Encrypyted Requests Intermittently Failing with Red Hat Policy Server (77348)
        • Responses Configured to Generate Signed SAML Session Tickets Using Public Key Obtained from XML Digital Signature Authentication Produce Unsigned SAML Session Tickets (98865)
        • WS-Security SAML 1.1 Holder of Key Assertion Not Accepted More Than Once (97266)
        • Responses Defined When Creating an Application Within Secure Web Services from WSDL Operation Are Not Immediately Usable (70468)
        • SOA Agent for IBM WebSphere Fails Under Load on Windows
        • Error Logged During Administrative UI Install on WebLogic (74188)
      • Defects Fixed in r12.1 as of CR1
        • Variables Created in Admin UI Containing Expression Keywords as Variable Name Substrings Being Resolved Incorrectly (71976)
        • SOA Agent Configuration Wizard Fails to Make Necessary Configuration File Changes for SOA Agent for Apache Web Server (78481)
        • Installer Properties File Used for Unattended Install Contains Bad Entries for SOA Admin UI on Windows (73363)
        • Uninstalling SOA Agent for IBM WebSphere Breaks the Application Server (72302)
        • Uninstall Does Not Remove the ETPKI Folder (72027)
        • Uninstall Does Not Remove SDK (68885)
        • Failover to Second Policy Server in Cluster Fails for SOA Agent for Web Servers (73808)
        • Documentation Install Does Not Remove Older Documentation in Upgrade Scenario (74629)
    • International Support
    • Platform Support and Installation Media
      • Locate the Platform Support Matrix
      • Locate the Bookshelf
      • Locate the Installation Media
    • Third-Party Software Acknowledgements
    • Accessibility Features
      • Product Enhancements
  • Advanced Password Services (APS) Release Notes
    • Welcome
    • Installation and Upgrade Considerations
      • Configuration Changes Required for Oracle iPlanet Web Server
    • Defects Fixed in 12.51
      • APS Uses Unsafe Functions on Windows Server 2008
    • Defects Fixed in 12.52
      • Forgotten Password Service (FPS) Fails When Configured on Apache HTTP Server (112542)
• Implementation Guide
  • CA SiteMinder® Components
    • CA SiteMinder® Components
      • Policy Server
      • CA SiteMinder® Agents
      • CA SiteMinder® Web Services Security Agents
      • CA Business Intelligence
      • Data Stores
        • Policy Store
        • User Store
        • External Administrative User Store
        • Key Store
        • Certificate Data Store
        • CA SiteMinder® Audit Database
        • Session Store
      • CA SiteMinder® Administrative UI
  • Architectural Considerations
    • Your Enterprise Environment
      • Operating Systems
      • Web Server Vendors
      • Application Server Vendors
      • Enterprise Resource Planning Systems
      • Directory Servers and Databases
    • Architectural Use Cases
      • Simple Deployment
      • Simple Deployment with Optional Components
      • Simple Deployment with Optional Agents
      • Multiple Components for Operational Continuity
        • Multiple Components for Operational Continuity Using CA SiteMinder® Load Balancing
        • Multiple Components for Operational Continuity Using Hardware Load Balancing
      • Clustered Components for Scale
      • Redundancy and High Availability
        • Agent to Policy Server Communication
          • Failover
          • Round Robin Load Balancing
          • Policy Server Clusters
          • Hardware Load Balancing
        • Policy Server to User Store Communication
          • Failover
          • Round Robin Load Balancing
        • Policy Server to Policy Store Communication
          • Master Policy Store
          • Multi–Mastered Policy Stores
        • Policy Server to Audit Store Communication
        • Policy Server to Session Store Communication
    • CA SiteMinder® Enhanced Session Assurance Architecture and Performance Considerations
      • Basic Architecture
      • Possible Architecture 1–Use Existing Components
      • Possible Architecture 2–Use Existing Policy Server
      • Possible Architecture 3–Full Separation of the Session Assurance Components
  • Plan a CA SiteMinder® Implementation
    • Implementation Planning Overview
    • Policy Management Models
      • Policy Management Using Application Objects
      • Policy Management Using Policy Domains and Domain Objects
    • Identify the Applications to Secure
      • Group Resources into Domains or EPM Applications
      • Group Resources into Realms or EPM Components
    • Identify User Stores
    • Identify Authentication Methods
    • Identify Password Management Options
      • Password Policy Considerations
    • Identify Who Will Manage Your Web Agents
      • Central and Local Configurations Together
    • Identify Data Centers
    • Identify Resources to be Secured with Multiple Cookie Domains
      • Load-balancing for SSO between Cookie Provider Domains and Other Cookie Domains
    • Determine if Partnerships Require CA SiteMinder® Federation
    • Determine if Advanced Encryption Standards are Required
    • Determine if Virtualization is to be Used
    • Determine how to Manage Policy Servers
      • Local Policy Server Management
      • Central Policy Server Management
    • Determine how to Manage Web Agents
  • Plan a CA SiteMinder® Web Services Security Implementation
    • Policy Management Models
      • Policy Management Using Application Objects
      • Policy Management Using Policy Domains and Policies
    • Identify the Web Services to Secure
    • Identify User Stores
    • Identify Authentication Methods
    • Identify Who Will Manage Your SiteMinder WSS Agents
    • Identify Data Centers
    • Determine if Advanced Encryption Standards are Required
    • Determine if Virtualization is to be Used
    • Determine how to Manage Policy Servers
    • Determine how to Manage SiteMinder WSS Agents
  • CA SiteMinder® Capacity Planning
    • Capacity Planning Introduced
    • Use Case: Capacity Planning
    • How to Estimate a Sustained Authentication Rate
      • Estimate Daily Authentications
      • Estimate a Sustained Authentication Rate
    • Estimate a Peak Authentication Rate
    • How to Estimate a Sustained Authorization Rate
      • Estimate Daily Authorizations
      • Estimate a Sustained Authorization Rate
    • Estimate a Peak Authorization Rate
  • CA SiteMinder® Web Services Security Capacity Planning
    • Capacity Planning Introduced
    • Use Case: Capacity Planning
    • How to Estimate a Sustained Request Rate
      • Estimate Daily Requests
      • Estimate a Sustained Request Rate
    • Estimate a Peak Request Rate
    • Other Factors to Consider When Capacity Planning
  • Configuration Considerations
    • Security Zones
    • Multiple Data Centers
      • Best Practices
      • Architectural Considerations
      • Multiple Data Center Use Cases
        • All Components in One Data Center
        • All Components in Multiple Data Centers
        • CA SiteMinder® Agent Communicating Across a Data Center
        • Policy Server Communicating Across a Data Center
        • Login Server Controlling User Store Writes
    • Authentication and a Centralized Login Server
      • Centralize Login Pages
      • Best Practices
      • Login Page Use Cases
        • Stand–Alone Login Page
        • Embedded Form on a Web Portal
  • Performance Tuning
    • Performance Tuning Introduced
    • Performance Tuning Roadmap
    • Web Tier Performance
      • Server Performance
      • CA SiteMinder® Agent Performance
        • Web Tier Socket Usage
        • Increase Request Timeout Interval during Heavy Loads
        • Increase the Amount of Available Sockets for the Agent
        • Increase NewSocketStep Setting
        • Minimum Sockets per Port Setting
        • Examples of Relationships between Socket Settings
      • Reduce Traffic between Your Agents and the Policy Server
        • How Agent Caches Work
        • Resource Cache
          • Resource Cache and URL Query Strings
        • Session Cache (authentication)
        • Authorization Cache
          • Session and Authorization Cache Settings
        • Caching and Anonymous Users
        • Other Parameters That Affect Web Agent Performance
          • Policy Server Poll Interval Parameter
          • Ignore Extensions Parameter
          • Ignore URL Parameter
      • Improve Agent Performance through Load Balancing
        • CA SiteMinder® Failover and Load Balancing with Multi-Threaded Web and Application Servers
        • CA SiteMinder® Failover and Load Balancing with Multi-Process Web and Application Servers
      • Web Servers, Web Agents, and Web Server Processes
        • Web Agent and Policy Server Interaction using Apache-based Web Server Worker Mode
        • Web Agent and Policy Server Interaction using Apache-based Web Server Pre-Fork Mode
    • Application Tier Performance
      • CA SiteMinder® Policy Design and Performance
      • CA SiteMinder® Policy Objects and Performance Roadmap
        • Applications
        • Domains
        • Realms
        • Rules and Rule Groups
        • Responses
      • Authentication Guidelines
        • CA SiteMinder® Policy Objects and Performance Roadmap
          • User Directories and Authentication Performance
          • CA SiteMinder® Web Services Security Authentication Schemes and Authentication Performance
          • Domains and Authentication Performance
          • Realms and Authentication Performance
      • Authorization Guidelines
        • Policy Objects and Performance
          • Rules and Authorization Performance
          • Responses and Authorization Performance
          • CA SiteMinder® Policy Membership and Authorization Performance
        • User Authorization Cache
          • User Authorization Cache Efficiency
          • Estimate the Size of the User Authorization Cache
      • Auditing and Performance
      • Load Balancing the Application Tier
    • Data Tier Performance
      • Data Tier Guidelines
        • System Resources
        • Secure Socket Layer and User Directories
        • Static IP Addresses and User Directories
        • User Directory Searches
        • Replication
      • User Store Capacity Planning
        • User Store Capacity Planning Checklist
        • How to Estimate a Sustained User Directory Search Rate
          • Use Authentication Guidelines to Estimate Directory Searches
            • Case 1: User Authentication and Directory Requests
            • Case 2: Policy Design and User Directory Requests
            • Case 3: Responses and User Directory Requests
            • Case 4: Password Services and Directory Requests
            • Case 5: Total Directory Requests for Authentication
          • Use Authorization Guidelines to Estimate Directory Searches
            • Case 1: Policy Membership and User Directory Requests
            • Case 2: Responses and User Directory Searches
            • Case 3: Total Directory Requests for Authorization
          • Estimate the Sustained User Directory Search Rate
            • Case: Estimate the Sustained User Directory Search Rate
        • Estimate the Peak User Directory Search Rate
          • Case: Estimate the Peak User Directory Search Rate
      • User Store Capacity Planning
        • User Store Capacity Planning Checklist
        • How to Estimate a Sustained User Directory Search Rate
          • Use Authentication Guidelines to Estimate Directory Searches
          • Use Authorization Guidelines to Estimate Directory Searches
          • Estimate the Sustained User Directory Search Rate
            • Case: Estimate the Sustained User Directory Search Rate
        • Estimate the Peak User Directory Search Rate
          • Case: Estimate the Peak User Directory Search Rate
    • Periodic Maintenance Tasks
  • Diagnose Implementation Issues
    • Diagnose Issues Introduced
    • Policy Server/Policy Store Connection Issues
    • Work with Support
      • Environment Information
      • Log Files
      • Policy Server Crash
        • Attach the Policy Store Data
        • Modify the Policy Server Trace Log
      • Agent Crash
      • Resource Leaks
      • Functional Issues
      • Random Issues
    • Locate Knowledge Base Articles
    • Measure CA SiteMinder® Performance
      • Network Sniffers
      • CA SiteMinder® OneView Monitor
      • CA SiteMinder® Test Tool
      • Directory Server Utilities and SQL Analyzers
  • Product Integrations
    • CA Arcot WebFort and RiskFort
      • Authentication in an On–Premise Arcot Integration
      • Confidence Levels and CA SiteMinder® Authorization
      • Risk Scores and Confidence Levels Compared
      • Enable Confidence Level Support for Authorization Decisions
      • CA Arcot Integration Use Cases
        • CA Arcot Authentication and Risk Analysis
        • CA SiteMinder® Authentication and CA Arcot Risk Analysis
        • CA SiteMinder® Authorization and Confidence Levels
      • User Store Considerations
    • CA Arcot A-OK
      • Authentication in a Hosted CA Arcot Integration
      • Confidence Levels and CA SiteMinder® Authorization
      • Risk Scores and Confidence Levels Compared
      • Enable Confidence Level Support
      • CA Arcot A-OK Integration Use Cases
        • CA Arcot A–OK Authentication and Risk Analysis
        • CA SiteMinder® Authorization and Confidence Levels
      • User Store Considerations
    • CA DataMinder Content Classification Service
      • CA DataMinder Content Classfication Service
      • CA DataMinder Content Classification Service Preclassification Agent
      • CA SiteMinder® Policy Server
      • CA SiteMinder® Agent for SharePoint
      • CA SiteMinder® Session Store
      • CA DataMinder Content Classification Service Integration Roadmap
        • CA DataMinder CCS Administrator Tasks
        • CA SiteMinder® Administrator Tasks
          • Enable SSL for the Integration
          • Configure a Connection to a CA DataMinder Content Classification Service
          • Modify the SharePoint Agent Configuration Object
          • Enable the DLP Exclusion List Parameter
          • Enable an Authorization Failure Message
        • CA Agent for SharePoint Owner Tasks
          • Modify the Proxy Rules for SharePoint Multi–Authentication
          • Enable the DLP Plug–in
        • Microsoft SharePoint Administrator Task
• Installation and Upgrade Guides
  • Policy Server Installation Guide
    • Policy Server Installation Requirements
      • Policy Server System Requirements
        • Windows
        • UNIX
    • Administrative UI Installation Requirements
      • System Requirements
        • Verify That the Windows Host Meets System Requirements
        • Verify the UNIX Host Meets System Requirements
        • Required Linux Libraries
    • Report Server Installation Requirements
      • System Requirements
        • Windows
        • UNIX
        • Solaris Required Patch Clusters
        • Red Hat Required Patch Clusters
      • Report Database Requirements
      • Connectivity Requirements
    • Installing the Policy Server on Windows Systems
      • Installation Road Map
      • Before You Install the Policy Server
      • How to Install the Policy Server
        • Policy Server Component Considerations
        • Policy Store Considerations
        • FIPS Considerations
        • Gather Information for the Installer
          • Required Information
          • Active Directory LDS Server Information
          • Oracle Directory Server Information
          • Microsoft SQL Server Information
          • Oracle RDBMS Information
          • OneView Monitor Information
        • Run the Policy Server Installer
        • Troubleshoot the Policy Server Installation
        • Enable SNMP Event Trapping
        • Configure a Policy Store
      • Unattended Policy Server Installation
      • Policy Server Configuration Wizard
        • How to Use the Configuration Wizard
          • Gather Information for the Configuration Wizard
            • Active Directory LDS Server Information
            • Oracle Directory Server Information
            • Microsoft SQL Server Information
            • Oracle RDBMS Information
            • OneView Monitor Information
          • Run the Configuration Wizard
      • Reinstall the Policy Server
      • How to Uninstall the Policy Server
        • Set the JRE in the Path Variable
        • Remove Policy Server References from Agent Host Files
        • Stop All CA SiteMinder® Processes
        • Uninstall the Policy Server
        • Remove Leftover Items
        • Remove Leftover Services
      • Scripting Interface
    • Installing the Policy Server on UNIX Systems
      • Installation Road Map
      • Solaris 10 Zone Support
        • Global Zone Support
        • Sparse-root Zone Support
        • Whole-root Zone Support
      • How to Prepare for the Policy Server Installation
        • Required Linux Libraries
        • Korn Shell (ksh) Package Required on Linux
        • Create a New UNIX Account
        • Modify the UNIX System Parameters
        • Unset Localization Variables
        • Unset the LANG Environment Variable
      • Before You Install the Policy Server
      • How to Install the Policy Server
        • Policy Server Component Considerations
        • Policy Store Considerations
        • FIPS Considerations
        • Gather Information for the Installer
          • Required Information
          • Active Directory LDS Server Information
          • Oracle Directory Server Information
          • Microsoft SQL Server Information
          • Oracle RDBMS Information
          • OneView Monitor Information
        • Install the Policy Server in GUI Mode
        • Install the Policy Server in Console Mode
        • Add Exceptions to Security–Enhanced Linux
        • Troubleshoot the Policy Server Installation
        • Restart the SNMP Daemon
        • Configure a Policy Store
      • Configure Auto Startup
      • Unattended Policy Server Installation
      • Policy Server Configuration Wizard
        • How to use the Configuration Wizard
          • Configuration Wizard Requirements
          • Run the Configuration Wizard in GUI Mode
          • Run the Configuration Wizard in Console Mode
      • How to Uninstall the Policy Server
        • Remove Policy Server References from Agent Host Files
        • Set the JRE in the PATH Variable
        • Stop all CA SiteMinder® Processes
        • Uninstall the Policy Server
        • Remove CA SiteMinder® References from IWS
        • Remove CA SiteMinder® References from StartServletExec
        • Remove Leftover Items
    • Configuring LDAP Directory Servers to Store CA SiteMinder® Data
      • LDAP Directory Servers as a Policy or Key Store
      • Installation Road Map
      • Important Considerations
      • Default Policy Store Objects Consideration
      • CA Directory as a Policy Store
        • Gather Directory Server Information
        • How to Configure the Policy Store
          • Create a DSA for the Policy Store
          • Create the Policy Store Schema
          • Open the DSA
          • Create the Base Tree Structure for Policy Store Data
          • Create a Superuser Administrator for the DSA
          • Point the Policy Server to the Policy Store
          • Set the CA SiteMinder® Super User Password
          • Verify the CA Directory Cache Configuration
          • Import the Policy Store Data Definitions
          • Import the Default Policy Store Objects
          • Enable the Advanced Authentication Server
          • Prepare for the Administrative UI Registration
      • CA Directory as a Session Store
        • How to Configure the Session Store
          • Obtain the Session Store Schema Files
          • Create a DSA for the Session Store
          • Add a Session Store Administrative User and Root DN
            • Command-line Procedure for CA Directory
          • Create the Session Store Schema
          • Point the Policy Server to the Session Store
      • Active Directory as a Policy Store
        • Gather Directory Server Information
        • How to Configure the Policy Store
          • Point the Policy Server to the Policy Store
          • Create the Policy Store Schema
          • Set the CA SiteMinder® Super User Password
          • Import the Policy Store Data Definitions
          • Import the Default Policy Store Objects
          • Enable the Advanced Authentication Server
          • Restart the Policy Server
          • Prepare for the Administrative UI Registration
        • Support for Active Directory ObjectCategory Indexing Attribute
        • Enable or Disable ObjectCategory Attribute Support
      • Domino Directory Server as a Policy Store
        • How to Configure a Domino Directory Server as a Policy Store
          • Gather Directory Server Information
          • Create the Policy Store Schema
          • Point the Policy Server to the Policy Store
          • Set the CA SiteMinder® Super User Password
          • Import the Policy Store Data Definitions
          • Import the Default Policy Store Objects
          • Enable the Advanced Authentication Server
          • Prepare for the Administrative UI Registration
      • IBM Tivoli Directory Server as a Policy Store
        • Gather Directory Server Information
        • How to Configure the Policy Store
          • Create a Directory Entry and Root Nodes
          • Point the Policy Server to the Policy Store
          • Create the Policy Store Schema
          • Set the CA SiteMinder® Super User Password
          • Import the Policy Store Data Definitions
          • Import the Default Policy Store Objects
          • Enable the Advanced Authentication Server
          • Restart the Policy Server
          • Prepare for the Administrative UI Registration
      • Microsoft Active Directory LDS as a Policy Store
        • Active Directory LDS Prerequisite
        • Gather Directory Server Information
        • How to Configure the Policy Store
          • Point the Policy Server to the Policy Store
          • Create the Policy Store Schema
          • Set the CA SiteMinder® Super User Password
          • Import the Policy Store Data Definitions
          • Import the Default Policy Store Objects
          • Enable the Advanced Authentication Server
          • Restart the Policy Server
          • Prepare for the Administrative UI Registration
      • Novell eDirectory as a Policy Store
        • Limitations of Policy Store Objects in Novell eDirectory
        • Gather Directory Server Information
        • How to Configure the Policy Store
          • Edit the Policy Store Schema Files
          • Point the Policy Server to the Policy Store
          • Create the Policy Store Schema
          • Set the CA SiteMinder® Super User Password
          • Import the Policy Store Data Definitions
          • Import the Default Policy Store Objects
          • Refresh the LDAP Server
          • Enable the Advanced Authentication Server
          • Restart the Policy Server
          • Prepare for the Administrative UI Registration
      • OpenLDAP as a Policy Store
        • Gather Directory Server Information
        • How to Configure the Policy Store
          • How to Configure the Slapd Configuration File
            • Specify the SiteMinder Schema Files
            • Specify Policy Store Indexing
            • Enable User Authentication
            • Specify Database Directives
            • Support Client-Side Sorting
            • Test the Configuration File
            • Restart the OpenLDAP Server
          • How to Create the Database
            • Create the Base Tree Structure
            • Add Entries
          • Point the Policy Server to the Policy Store
          • Set the CA SiteMinder® Super User Password
          • Import the Policy Store Data Definitions
          • Import the Default Policy Store Objects
          • Enable the Advanced Authentication Server
          • Prepare for the Administrative UI Registration
      • Oracle Directory Server as a Policy Store
        • Gather Directory Server Information
        • How to Configure the Policy Store
          • Oracle Directory Server Enterprise Edition Considerations
            • smldapsetup and Oracle Directory Enterprise Edition
            • Replicate an Oracle Directory Server Enterprise Edition Policy Store
          • Point the Policy Server to the Policy Store
          • Create the Policy Store Schema
          • Set the CA SiteMinder® Super User Password
          • Import the Policy Store Data Definitions
          • Import the Default Policy Store Objects
          • Enable the Advanced Authentication Server
          • Restart the Policy Server
          • Prepare for the Administrative UI Registration
      • Oracle Internet Directory as a Policy Store
        • Gather Directory Server Information
        • How to Configure the Policy Store
          • Index a Required Attribute
          • Configure a Domain in Oracle Internet Directory
          • Point the Policy Server to the Policy Store
          • Create the Policy Store Schema
          • Set the CA SiteMinder® Super User Password
          • Import the Policy Store Data Definitions
          • Import the Default Policy Store Objects
          • Enable the Advanced Authentication Server
          • Restart the Policy Server
          • Prepare for the Administrative UI Registration
      • How to Configure Oracle Unified Directory as a Policy Store
        • Gather Directory Server Information
        • How to Configure the Oracle Unified Directory Instance
          • Specify the CA SiteMinder® Schema Files on Windows
          • Specify the CA SiteMinder® Schema Files on UNIX
          • Configure Policy Store Indexing on Windows
          • Specify Policy Store Indexing on UNIX
        • How to Create the Database
          • Create the Base Tree Structure
          • Add Entries to the Database
        • Point the Policy Server to the Policy Store
        • Set the CA SiteMinder® Super User Password
        • Import the Policy Store Data Definitions
        • Import the Default Policy Store Objects
        • Enable the Advanced Authentication Server
        • Prepare for the Administrative UI Registration
      • How to Configure Oracle Virtual Directory as a Policy Store
        • Gather Directory Server Information
        • Extend the OVD Local Schema With the CA SiteMinder® Schema Files
        • Create an Oracle Virtual Directory Adapter to Connect to Existing Policy Store
        • Point the Policy Server to the Policy Store
        • Set the CA SiteMinder® Super User Password
        • Enable the Advanced Authentication Server
        • Restart the Policy Server
        • Prepare for the Administrative UI Registration
      • Red Hat Directory Server as a Policy Store
        • Gather Directory Server Information
        • How to Configure the Policy Store
          • Point the Policy Server to the Policy Store
          • Create the Policy Store Schema
          • Set the CA SiteMinder® Super User Password
          • Import the Policy Store Data Definitions
          • Import the Default Policy Store Objects
          • Enable the Advanced Authentication Server
          • Restart the Policy Server
          • Prepare for the Administrative UI Registration
      • Siemens DirX as a Policy Store
        • Gather Directory Server Information
        • How to Configure the Policy Store
          • Create the Policy Store Schema
          • Point the Policy Server to the Policy Store
          • Set the CA SiteMinder® Super User Password
          • Import the Policy Store Data Definitions
          • Import the Default Policy Store Objects
          • Enable the Advanced Authentication Server
          • Prepare for the Administrative UI Registration
      • Configure a Separate Key Store
        • Microsoft Active Directory as a Key Store
          • How to Configure the Key Store
            • Gather Directory Server Information
            • Register the Key Store
            • Create the Key Store Schema
            • Import the Key Store Schema
            • Restart the Policy Server
        • Microsoft AD LDS as a Key Store
          • How to Configure the Key Store
            • Key Store Prerequisites
              • Allow User Creation in the Configuration Partition
            • Gather Directory Server Information
            • Register the Key Store
            • Create the Key Store Schema
            • Import the Key Store Schema
            • Restart the Policy Server
        • Oracle Directory Server Enterprise Edition as a Key Store
          • How to Configure the Key Store
            • Key Store Considerations
            • Gather Directory Server Information
            • Register the Key Store
            • Create the Key Store Schema
            • Import the Key Store Schema
            • Restart the Policy Server
          • Replicate an Oracle Directory Server Key Store
        • Oracle Internet Directory Server as a Key Store
          • How to Configure the Key Store
            • Gather Directory Server Information
            • Register the Key Store
            • Create the Key Store Schema
            • Import the Key Store Schema
            • Restart the Policy Server
        • Red Hat Directory Server as a Key Store
          • How to Configure the Key Store
            • Register the Key Store
            • Create the Key Store Schema
            • Import the Key Store Schema
            • Restart the Policy Server
    • Configuring CA SiteMinder® Data Stores in a Relational Database
      • Relational Databases as a Policy or Key Store
      • Installation Road Map
      • Important Considerations
      • Default Policy Store Objects Consideration
      • Schema Files for Relational Databases
        • IBM DB2 Schema Files
        • MySQL Schema Files
        • SQL Server Schema Files
        • Oracle Schema Files
      • Configure a MySQL Policy Store
        • Gather Database Information
        • How to Configure the Policy Store
          • Create the CA SiteMinder® Schema
          • Configure a MySQL Data Source for CA SiteMinder®
            • Create a MySQL Data Source on Windows
            • Create a MySQL Data Source on UNIX Systems
            • Create the MySQL Wire Protocol Driver
          • Point the Policy Server to the Database
          • Set the CA SiteMinder® Super User Password
          • Import the Policy Store Data Definitions
          • Import the Default Policy Store Objects
          • Enable the Advanced Authentication Server
          • Restart the Policy Server
          • Prepare for the Administrative UI Registration
      • Configure a SQL Server Policy Store
        • Gather Database Information
        • How to Configure the Policy Store
          • Create the CA SiteMinder® Schema
          • Configure a SQL Server Data Source for CA SiteMinder®
            • SQL Server Authentication Mode Considerations
            • Create a SQL Server Data Source on Windows
            • Create a SQL Server Data Sources on UNIX Systems
            • Configure the SQL Server Wire Protocol Driver
          • Point the Policy Server to the Database
          • Set the CA SiteMinder® Super User Password
          • Import the Policy Store Data Definitions
          • Import the Default Policy Store Objects
          • Enable the Advanced Authentication Server
          • Restart the Policy Server
          • Prepare for the Administrative UI Registration
      • Configure an Oracle Policy Store
        • Prerequisites for an Oracle 10g Database
          • Create an Oracle 10g Table Space for the Policy Store
          • SM--Create an Oracle 10g User to Manage the Policy Store’s Table Space
        • Gather Database Information
          • Required Information
          • Oracle Database Information
          • Oracle RAC Database (without SCAN) Information
          • Oracle RAC Database (Using SCAN) Information
        • How to Configure the Policy Store
          • Create the CA SiteMinder® Schema
          • Configure an Oracle Data Source for CA SiteMinder®
            • Create an Oracle Data Source on Windows
            • Create an Oracle RAC (no SCAN) Data Source on Windows
            • Create an Oracle RAC SCAN Data Source on Windows
            • Create an Oracle Data Source on UNIX Systems
              • Configure the Oracle Wire Protocol Driver
              • Configure the Oracle Wire Protocol Driver for Oracle RAC without SCAN
          • Point the Policy Server to the Database
          • Set the CA SiteMinder® Super User Password
          • Import the Policy Store Data Definitions
          • Import the Default Policy Store Objects
          • Enable the Advanced Authentication Server
          • Restart the Policy Server
          • Prepare for the Administrative UI Registration
      • Configure an IBM DB2 Policy Store
        • Gather Database Information
        • How to Configure the Policy Store
          • Create the CA SiteMinder® Schema
          • Configure an IBM DB2 Data Source for CA SiteMinder®
            • Create a DB2 Data Source on Windows Systems
            • Create a DB2 Data Source on UNIX Systems
            • Configure the DB2 Wire Protocol Driver
          • Point the Policy Server to the Database
          • Set the CA SiteMinder® Super User Password
          • Import the Policy Store Data Definitions
          • Import the Default Policy Store Objects
          • Enable the Advanced Authentication Server
          • Prepare for the Administrative UI Registration
      • How to Store Session Information in IBM DB2
        • Create the Session Store Schema
        • Point the Policy Server to the Database
        • Restart the Policy Server
      • How to Store Session Information in MySQL
        • Create the Session Store Schema
        • Point the Policy Server to the Database
        • Restart the Policy Server
      • How to Store Session Information in Oracle
        • Create the Session Store Schema
        • Point the Policy Server to the Database
        • Restart the Policy Server
      • How to Store Session Information in SQL Server
        • Create the Session Store Schema
        • Point the Policy Server to the Database
        • Restart the Policy Server
      • How to Store Audit Logs in IBM DB2
        • Create the Audit Store Schema
        • Point the Policy Server to the Database
        • Restart the Policy Server
      • How to Store Audit Logs in MySQL
        • Create the Audit Log Schema
        • Point the Policy Server to the Database
        • Restart the Policy Server
      • How to Store Audit Logs in Oracle
        • Create the Audit Log Schema
        • Point the Policy Server to the Database
        • Restart the Policy Server
      • How to Store Audit Logs in SQL Server
        • Create the Audit Log Schema
        • Point the Policy Server to the Database
        • Restart the Policy Server
      • How to Store Key Information in IBM DB2
        • Create the Key Store Schema
        • Point the Policy Server to Database
        • Restart the Policy Server
      • How to Store Key Information in MySQL
        • Create the Key Store Schema
        • Point the Policy Server to Database
        • Restart the Policy Server
      • How to Store Key Information in Oracle
        • Create the Key Store Schema
        • Point the Policy Server to Database
        • Restart the Policy Server
      • How to Store Key Information in SQL Server
        • Create the Key Store Schema
        • Point the Policy Server to Database
        • Restart the Policy Server
      • Sample User Directories
        • Configure an IBM DB2 Sample User Directory
        • Configure a MySQL Sample User Directory
        • Configure an Oracle Sample User Directory
        • Configure a SQL Server Sample User Directory
    • Installing the Administrative UI
      • Installation Road Map
      • Administrative UI Installation Options
      • Trusted Relationship with a Policy Server
      • Complete the Administrative UI Installation Checklist
      • How to Install the Administrative UI
        • Gather Information for the Installer
        • Reset the Administrative UI Registration Window
        • How to Install the Administrative UI
          • Review Prerequisite Information
          • Install and Register the Administrative UI
          • Install the Administrative UI Using a GUI
          • Install the Administrative UI Using a UNIX Console
        • Troubleshoot the Administrative UI Installation
      • How to Register the Administrative UI
        • Create the FIPS Environment Variable
        • Start the Application Server
        • Register the Administrative UI
          • Enable Secure Cookies
      • Stop the Application Server
      • Administrator Credentials
      • (Optional) Install and Configure Additional Administrative UIs for High Availability
      • How to Configure Additional Policy Server Connections
        • Run the Registration Tool
        • Gather Registration Information
        • Configure the Connection to the Policy Server
      • Modify the Default Policy Server Connection
      • Delete a Policy Server Connection
      • (Optional) Uninstall the Administrative UI
      • Uninstall the Administrative UI on UNIX
      • Prepare for Web Agent Installation
    • Installing Reports
      • Installation Road Map
      • Reporting Installation Checklists
        • Report Server
        • Report Database and Audit Database
        • Report Database and Audit Database
      • Reporting Considerations
      • How the Reports Installation Works
      • How to Install the Report Server
        • Gather Information for the Installer
          • Installation Credentials
          • MySQL Report Database
          • SQLAnywhere Report Database
          • Microsoft SQL Server Report Database
          • Oracle Report Database
          • Apache Tomcat Installation
        • Install the Report Server
          • Before You Install
          • Windows
          • UNIX
        • Troubleshoot the Report Server Installation
      • How to Install the Report Templates
        • Gather Information for the Installer
        • Install the Report Templates
          • Before You Install
          • Windows
          • UNIX GUI
          • UNIX Console
        • Increase the Job Server Service Timeout Value
          • Increase the Timeout Value on Windows
          • Increase the Timeout Value on UNIX
      • How to Register the Report Server
        • Create a Client Name and Passphrase
        • Gather Registration Information
        • Register the Report Server with the Policy Server
        • Restart the Report Server
        • Configure the Connection to the Administrative UI
      • How to Configure an Audit Database
        • Register the Audit Database with the Administrative UI
        • Audit Database and Report Server Connectivity
      • Start the Report Server
      • Stop the Report Server
      • How to Uninstall Reporting
        • Uninstall the Report Server Configuration Wizard from Windows
        • Uninstall the Report Server Configuration Wizard from UNIX
        • Uninstall the Report Server from Windows
        • Uninstall the Report Server from UNIX
        • Remove Windows Items
        • Remove UNIX Items
        • Remove the Report Database Tables
      • Delete a Report Server Connection to the Administrative UI
      • Reinstall the Report Server
    • Configuring the OneView Monitor
      • OneView Monitor Overview
      • System Requirements for OneView Monitor
      • Configure the OneView Monitor
      • Limitation of OneView Monitor GUI/IIS Web Agent on Same Machine
      • How to Configure the OneView Monitor GUI on Windows/IIS
        • Prerequisites to Installing ServletExec on Windows
        • Install ServletExec on Windows IIS
        • Set Permissions for IIS Users After Installing ServletExec
      • How to Configure the OneView Monitor GUI on UNIX/Sun Java System
        • Prerequisites to Installing ServletExec
        • Disable Servlets in Sun Java System 6.0
        • Install ServletExec/AS on UNIX/Sun Java System
      • Start the OneView Monitor Service
      • Access the OneView Monitor GUI
      • Monitor a Policy Server Cluster
    • SNMP Support
      • SNMP Support Overview
      • Prerequisites for Windows and UNIX Systems
        • Windows Prerequisites
        • UNIX Systems Prerequisites
          • Solaris
          • Linux
      • Configure the SNMP Agent on Windows
        • How to Configure SNMP Event Trapping on Windows
          • Enable SNMP Event Trapping
          • Configure snmptrap.conf
      • Configure the SNMP Agent on UNIX Systems
        • How to Configure SNMP Event Trapping on UNIX Systems
          • Enable SNMP event trapping
          • Configure snmptrap.config
          • Stop and Restart the Policy Server
        • Test SNMP Gets for Red Hat Enterprise Linux Advanced Server
    • Installing the Administrative UI to an Existing Application Server
      • Administrative UI Installation Options
      • Administrative UI Installation Requirements
        • Administrative UI System Requirements
          • Verify Windows System Requirements
          • Verify UNIX System Requirements
        • Application Server Requirements
          • JBoss
          • WebLogic as an Application Server
            • Install WebLogic
            • Create a WebLogic Application Server Instance
            • Verify the WebLogic Domain
          • WebSphere as an Application Server
            • Install WebSphere
            • Verify WebSphere is Working
      • Trusted Relationship with a Policy Server
      • Administrative UI Installation Checklist
      • How to Install the Administrative UI
        • Required Linux Libraries
        • Gather Application Server Information
          • JBoss Information
          • WebLogic Information
          • WebSphere Information
        • Install the Administrative UI
          • Before You Install
          • Install the Administrative UI
          • Install the Administrative UI Using a GUI
          • Install the Administrative UI Using a UNIX Console
      • How to Register the Administrative UI
        • Reset the Administrative UI Registration Window
        • Create the FIPS Environment Variable
        • Start the Application Server
        • Register the Administrative UI
      • Stop the Application Server
      • Administrator Credentials
      • Administrative UI High Availability
      • Uninstall the Administrative UI on Windows
      • Uninstall the Administrative UI on UNIX
    • Troubleshooting
      • Policy Server Troubleshooting
        • NETE_PS_ALT_CONF_FILE Environment Variable on Solaris
        • Policy Server Fails to Start After Installation
        • CA SiteMinder® Environment Variables are not set in the Profile File
        • Winsock error 10054 message
        • Working with a CA SiteMinder® License
        • Non-english Input Characters Contain Junk Characters
        • Java Error Messages When Uninstalling
          • Set the JRE in the PATH Variable on Windows
          • Set the JRE in the PATH Variable on Solaris
        • Adobe Acrobat Reader Won’t Install
        • Problem With Using Active Directory as a User Store
        • AE failed to load library 'smjavaapi’. System error
      • Policy Store Troubleshooting
        • Policy Stores with Large Numbers of Objects
        • SSL initialization failed: error -8174 (security library: bad database.)
        • ODBC Policy Store Import Fails with UserDirectory Error
      • OneView Monitor Troubleshooting
        • Fix Modified UNIX/Sun Java System Web Server Configuration Files
        • Windows/IIS Virtual Path to /sitemindermonitor Does Not Exist
      • Administrative UI Troubleshooting
        • Administrative UI Hangs
        • WebSphere Crashes with an Unhandled Exception
        • Cannot Register a Policy Server Connection
        • API Error Appears
        • Registration Not on File Error Appears
        • Invalid Registration File Error Appears
        • Registration Fails without Timeout
        • Cannot Find the Administrative UI Registration Log
        • Search Fails with Timeout Error
        • Cannot Find the Default Logging File
        • Default Log File does not Provide Enough Information
      • Report Server Troubleshooting
        • Report Server Installation Fails with Error Regarding Characters
        • Report Server Installer Displays Missing File Error
        • Uninstall Prompts to Close Applications
        • Audit-based Reports Return No Results
        • Policy Analysis Reports Fail to Run
        • Administrative UI Displays Missing File Error
    • Unattended Installation
      • Unattended Installation Introduced
      • Unattended Installation Guidelines
      • Default Properties Files
        • Policy Server Properties File
        • Administrative UI Properties Files
        • Reporting Properties File
      • How to Run an Unattended Policy Server Install
        • Modify the Policy Server Installer Properties Files
          • General Policy Server Information
          • Policy Server Features
          • OneView Monitor GUI
          • SNMP
          • Policy Store
          • Enhanced Session Assurance with DeviceDNA™ Settings
        • Run the Policy Server Installer
          • Before You Install
          • Windows
          • UNIX
        • Troubleshoot the Policy Server Installation
        • Stop an Unattended Policy Server Installation
      • How to Run an Unattended Administrative UI Install
        • Modify the Prerequisite Installer Properties File
          • General Information
          • Server Information
          • End User Licensing Agreement
        • Modify the Administrative UI Installer Properties File
          • General Information
          • Application Server Information
            • JBoss Information
            • WebLogic Information
            • WebSphere Information
        • Run the Administrative UI Installer
          • Before You Install
          • Windows
          • UNIX
      • How to Run an Unattended Report Server Install
        • Modify the Report Server Response File for Windows
          • Install
          • Features
          • BIEK
        • Modify the Report Server Response File for UNIX
          • Manual Settings
          • Paths
          • Product Information
          • Installation Information
          • Tomcat
          • Application Server
          • CMS Cluster
          • CMS
          • MySQL
          • Audit
          • Marketing Products
          • BIEK
        • Modify the CA SiteMinder® Report Server Configuration Wizard Properties File
        • Run the Report Server Installer
          • Before You Install
          • Windows
          • UNIX
        • Install the Report Templates
          • Before You Install
          • Windows
          • UNIX
    • Configuring the Policy Server for an International Environment
      • Policy Servers in an International Environment
      • Planning Considerations Before Installing the Policy Server
        • Policy Server Components Supporting Multi-byte Characters
        • Support for Multi-Byte Character URLs
          • How to Enable MBCS URL Support
            • Web Browser Requirements for MBCS URLs
            • Web Server Requirements for MBCS URLs
            • Enable Multi-byte Character Support
          • Protect a Resource with MBCS URLs
          • Authentication Schemes Supporting MBCS URLs
      • Configure CA SiteMinder® Data Stores Supporting International Characters
        • Configure an International CA SiteMinder® Data Store in SQL Server
        • Configure an International CA SiteMinder® Data Store in Oracle
          • Solaris/LINUX Red Hat Policy Server Logging UTF-8 Characters to an Oracle Database
        • Configure a User Store that Supports Unicode in SQL Server
        • Configure a Japanese User Store in Oracle
    • Modified Environment Variables
      • Modified Windows Environment Variables
      • Modified UNIX Environment Variables
  • SiteMinder Upgrade Guide
    • Planning an Upgrade
      • Component Versions in this Guide
      • Upgrade Paths
        • Migration
        • Parallel Upgrade
      • How to Plan a Migration
        • Review the Policy Server Release Notes
        • Analyze Your SiteMinder Environment
        • Plan a Recovery Strategy
        • Determine the Upgrade Path
        • Mixed SiteMinder Environments
          • Use Mixed-Mode Support
          • Mixed Mode Support for CA SiteMinder® 6.x
            • Limitations of a 6.x Mixed Environment
          • r12.x Mixed Mode Support
            • Limitations of an r12.x Mixed Environment
      • How to Plan a Parallel Upgrade
      • How to Upgrade Simple Test Environments
      • Common CA SiteMinder® Environments
        • Single Policy Store, Multiple Policy Servers and Web Agents
        • Clustered Environment
        • Shared User Directory Environment
    • Upgrading from r6.x
      • Migration Considerations
        • Policy Server Option Pack Support
        • Crystal Reports in 12.x
        • Administrator Authentication
        • Certificate Data Management
        • Federation Integration
        • Single Sign–on
        • Avoid Policy Store Corruption
        • Advanced Password Services
      • How the r6.x Migration Works
      • How to Migrate from r6.x
        • Download the Policy Store Schema Files
        • Extend the Policy Store Schema
          • Extend the Policy Store Schema for Your Active Directory Server
          • Extend Policy Store Schema for Your Active Directory LDS Server
          • Extend Policy Store Schema for Your CA Directory Server
          • Extend the Policy Store Schema for Your IBM DB2 Server
          • Extend the Policy Store Schema for Your IBM Tivoli Directory Server
          • Extend the Policy Store Schema for Your Novell eDirectory Server
          • Extend the Policy Store Schema for Your OpenLDAP Server
          • Extend the Policy Store Schema for Your Oracle Internet Directory Server
          • Extend the Policy Store Schema for Your Red Hat Directory Server
          • Extend the Policy Store Schema for Your Siemens DirX Server
          • Extend the Policy Store Schema for Your Sun Java System Directory Server
          • Extend the Policy Store Schema for Your Microsoft SQL Server
          • Extend the Policy Store Schema for Your MySQL Server
          • Extend the Policy Store Schema for Your Oracle Server
        • Synchronize Key Database Instances
        • Upgrade an r6.x Policy Server
          • Before You Upgrade
          • Required Linux Libraries
          • Korn Shell (ksh) Package Required on Linux
          • Windows
          • UNIX GUI
          • UNIX Console
          • Enable the Advanced Authentication Server
          • Policy Server Upgrade Creates New Files
          • Custom Server–Side Code Requirements
          • Troubleshoot a Policy Server Upgrade
        • After You Upgrade the Policy Server
        • Upgrade an r6.x Web Agent
          • Before You Upgrade r6.x Web Agents
            • Ensure the Policy Server is Configured
            • Identify the Required Administrator and Policy Server Object Names
            • Identify the Web Agent Requirements
          • Upgrade an r6.x Web Agent
          • Custom Agent Requirements
        • Upgrade an r6.x Policy Store
          • Options for Upgrading a Policy Store
          • Options for Upgrading a Key Store
          • How to Upgrade an r6.x Policy Store
            • Stop all Policy Severs
            • Import the Policy Store Data Definitions
            • Import the Default Policy Store Objects
            • Make the legacy federation Objects Available in the Administrative UI
            • Start all Policy Servers
        • Install the Administrative User Interface
        • Upgrade an r6.x Session Store
        • Upgrade an r6.x Audit Log Database
      • How a Parallel Upgrade Works
      • How to Configure a Parallel Environment
        • Parallel Environment Key Management Options
          • Common Key Store Deployment
          • Multiple Key Store Deployment
        • Create the 12.52 Environment
        • Common Key Store Single Sign–on Requirements
        • How to Separate a Key Store from a Policy Store
          • Disable Dynamic Agent Key Generation
          • Export the Agent Keys
          • Import the Agent Keys
          • Configure all Policy Servers to use the Key Store
          • Re–enable Dynamic Agent Key Generation
        • Multiple Key Store Single Sign–on Requirements
        • Migrate Keys and Certificates
        • Migrate the Assertion Issuer ID
        • Migrate the r6.x Policies
        • User Directory Single Sign–on Requirements
    • Upgrading from r12.x
      • Migration Considerations
        • Administrative UI Upgrade Paths
        • Administrative UI Protection with SiteMinder
        • Single Sign–on
        • Certificate Data Management
        • Federation Integration
        • Avoid Policy Store Corruption
        • Advanced Password Services
      • How the r12.x Migration Works
      • How to Migrate from r12.x
        • Synchronize Key Database Instances
        • Upgrade an r12.x Policy Server
          • Before You Upgrade
          • Required Linux Libraries
          • Disable XML Signature Wrapping Checks Before a Policy Server Upgrade
          • Verify That Existing Federated SAML Partnerships Do Not Have the Same Backchannel Username
          • Upgrade a Policy Server on Windows
          • Upgrade a Policy Server Using a GUI on UNIX
          • Upgrade a Policy Server on UNIX Using a Console
          • Policy Server Upgrade Creates a New JVMOptions File
          • Custom Server–Side Code Requirements
          • Troubleshoot a Policy Server Upgrade
        • Upgrade an r12.x Web Agent
          • Before You Upgrade an r12.x Web Agent
            • Ensure the Policy Server is Configured
            • Identify the Required Administrator and Policy Server Object Names
            • Identify the Web Agent Requirements
          • Upgrade an r12.x Web Agent
          • Custom Agent Requirements
        • How to Upgrade an r12.x Policy Store
          • Stop all Policy Severs
          • Import the Policy Store Data Definitions
          • Import the Default Policy Store Objects
          • Run the XPS Sweeper Utility
          • Start all Policy Servers
        • Upgrade an r12.x Administrative UI
          • Before You Upgrade
          • Required Linux Libraries
          • Upgrade the Administrative UI on Windows
          • Upgrade the Administrative UI on UNIX
        • Upgrade an r12.x Report Server
      • How a Parallel Upgrade Works
      • How to Configure a Parallel Environment
        • Parallel Environment Key Management Options
          • Common Key Store Deployment
          • Multiple Key Store Deployment
        • Create the 12.52 Environment
        • Common Key Store Single Sign–on Requirements
        • How to Separate a Key Store from a Policy Store
          • Disable Dynamic Agent Key Generation
          • Export the Agent Keys
          • Import the Agent Keys
          • Configure all Policy Servers to use the Key Store
          • Re–enable Dynamic Agent Key Generation
        • Multiple Key Store Single Sign–on Requirements
        • Migrate Keys and Certificates
        • Migrate the Assertion Issuer ID
        • Migrate the r12.x Policies
        • User Directory Single Sign on Requirements
    • Using FIPS-Compliant Algorithms
      • FIPS 140-2 Migration Overview
      • FIPS 140-2 Migration Requirements
      • Migration Roadmap—Re-Encrypt Sensitive Data
      • How to Re-Encrypt Existing Sensitive Data
        • Gather Environment Information
        • Set a Policy Server to FIPS-Migration Mode
        • Re-encrypt a Policy Store Key
        • Re-Encrypt the Policy Store Administrator Password
        • Re-encrypt the CA SiteMinder® Super User Password
        • Set an Agent to FIPS-Migration Mode
        • Re-encrypt Client Shared Secrets
          • Use the Administrative UI to Re-encrypt a Shared Secret
          • Use smreghost to Re-encrypt a Shared Secret
        • Re-encrypt Policy and Key Store Data
          • Options for Re-encrypting Policy and Key Store Data
          • Re-encrypt Keys Stored in the Policy or Key Store
          • Re-encrypt the Policy Store Data
        • Verify that Password Blobs are Re-encrypted
      • Migration Roadmap—Configure FIPS-Only Mode
      • How to Configure FIPS-only Mode
        • Set an Agent to FIPS-only Mode
        • Set the Policy Server to FIPS-only Mode
        • How to Re–Register an Administrative UI Configured for Internal Authentication
          • Stop the Application Server
          • Delete the Administrative UI Data Directory
          • Reset the Administrative UI Registration Window
          • Start the Application Server
          • Register the Administrative UI
        • How to Re–Register an Administrative UI Configured for External Authentication
          • Delete an Administrative UI Connection to the Policy Server
          • Run the Registration Tool
          • Gather Registration Information
          • Configure the Connection to the Policy Server
          • Delete the Previous Trusted Host
        • How to Re-Register the Report Server Connection
          • Create a Client Name and Passphrase
          • Gather Registration Information
          • Register the Report Server with the Policy Server
    • Troubleshoot a SiteMinder Key Database Migration
      • Status of CA SiteMinder® Key Database Migration Unknown
      • Certificate Data Store Error Appears
      • Migration Failed Error Appears
      • Migrate a CA SiteMinder® Key Database Manually
  • Agent for IIS Installation Guide
    • Preparation
      • Only IIS Web Server Procedures in this Guide
      • Hardware Requirements for CA SiteMinder® Agents
      • Combined Functions in New Agent for Internet Information Services (IIS) Web Servers
      • Multiple Agent for IIS Directory Structures According to Operating Environment
      • CA SiteMinder® Agent Preparation Roadmap
      • How to Prepare for an Agent for IIS Installation on your web server
        • Verify that you have an Account with Administrative Privileges on the Windows Computer Hosting your IIS Web Server
        • Verify that the IIS Role, and the Related Role Services are Installed
        • Locate the Platform Support Matrix
        • Verify that the Windows Operating Environment for your IIS Web Server has the Proper Service Packs and Updates Installed
        • Review the Policy Server Prerequisites for Agent for IIS Installations
        • Review the Web Agent Release Notes for Known Issues
    • Install an Agent for IIS on Windows Operating Environments
      • Agent Installation Compared to Agent Configuration
      • Agent for IIS Installation and Configuration Roadmap
      • How to Install and Configure a CA SiteMinder® Agent for IIS
        • IIS 7.x Web Server Shared Configuration and the CA SiteMinder® Agent for IIS
          • How Web Agent Logs and Trace Logs Work with IIS 7.x Web Server Shared Configuration
        • Gather the Information for the Agent Installation Program for the Windows Operating Environment
        • Run the Installation Program on Windows
        • Gather the Information for the Agent Configuration Program for IIS Web Servers
        • Run the Web Agent Configuration Wizard
        • Verify that the ISAPI Filter is First in the List When Using Classic Pipeline Mode
        • Run the Unattended or Silent Installation and Configuration Programs for your Web Agent or Agent for IIS
          • Add CA SiteMinder® Protection to Additional Virtual Sites on IIS Web Servers Silently
          • Remove a CA SiteMinder® Web Agent Configuration from an IIS Web Server Silently
          • Remove CA SiteMinder® Protection From Some Virtual Sites on IIS Web Servers Silently
      • How to Configure Certain Settings for the CA SiteMinder® Agent for IIS Manually
        • Set Permissions Manually for Non-Default Log Locations
        • Change IIS Settings Manually for CA SiteMinder® Authentication Schemes Requiring Certificates
    • Upgrade a Web Agent to 12.52
      • Agent for IIS Upgrade Roadmap
      • How to Prepare for a CA SiteMinder® Agent Upgrade
      • Source the Environment Script on UNIX and Linux Operating Environments
      • Run the Installation Wizard to Upgrade your Agent for IIS
      • Add the logging parameter values to your agent configuration object
      • How to Upgrade an Agent for IIS from Version 12.0.2 or Lower
        • Remove the configuration of your existing agent from your web server
        • Remove the existing agent software from your web server
        • Install the new version of the agent on your web server
        • Configure the new version of the agent on your web server
        • (Optional) Review the directory structure of the new agent
    • Dynamic Policy Server Clusters
      • Connect a Web Agent to a Dynamic Policy Server Cluster
    • Starting and Stopping Web Agents
      • Enable a Web Agent
      • Disable a Web Agent
    • Uninstall a Web Agent
      • Notes About Uninstalling Web Agents
      • Uninstall a Web Agent from a Windows Operating Environment
      • Silently Remove a CA SiteMinder® Web Agent from a Windows Operating Environment
    • Troubleshooting
      • I need to execute another IIS 7.x Module Before the CA SiteMinder® Web Agent for IIS
      • Changing Document Root Folder after Agent Configuration Leaves Resources Unprotected
      • Diagnose Agent Start-Up/Shutdown Issues (Framework Agents Only)
      • Event Viewer Message Describes lack of Permissions on Host Configuration File
    • Worksheets
      • Web Agent Install Worksheet for the Windows Operating Environment
      • CA SiteMinder® Agent Configuration Worksheet for IIS Web Servers
  • Web Agent Installation Guide for Apache-based servers
    • Preparation
      • Only Apache-based Web Server Procedures in this Guide
      • Hardware Requirements for CA SiteMinder® Agents
      • Preparation Roadmap for Apache-based web servers
      • How to Prepare for a Web Agent Installation on Apache-based Servers
        • Locate the Platform Support Matrix
        • Apache-based server Preparations for Windows operating environments
          • Install an Apache Web Server on Windows as a Service for All Users
          • Verify Presence of a Logs Subdirectory with Permissions for Apache-based Web Agents
        • Apache-based server Preparations on UNIX operating environments
          • Set the DISPLAY For CA SiteMinder® Agent Installations on UNIX
          • Verify Presence of a Logs Subdirectory with Permissions for Apache-based CA SiteMinder® Agents
          • Required Solaris Patches
          • AIX Requirements
        • Apache-based server Preparations for Linux operating environments
          • Required Linux Patches
          • Required Linux Libraries
          • Linux Tools Required
          • Compile an Apache Web Server on a Linux System
          • Verify Presence of a Logs Subdirectory with Permissions for Apache-based CA SiteMinder® Agents
        • How to Prepare for Agent Installation and Configuration on z/OS Systems
          • Locate the Platform Support Matrix
          • Locate the Installation Media
          • Set the DISPLAY Variable for CA SiteMinder® Agent Installations on z/OS
          • Verify Presence of a Logs Subdirectory with Permissions for Apache-based CA SiteMinder® Agents
          • Add a Supported JRE to the System Path
        • IBM HTTP server Preparations for all Supported Operating Environments
          • Enable Write Permissions for IBM HTTP Server Logs
      • Policy Server Requirements
    • Install and Configure Apache-based Agents on Windows
      • Agent Installation Compared to Agent Configuration
      • How to Install Agents on Windows Systems
        • Gather the Information for the Installation Program
        • Run the Installation Program on Windows
      • How to Configure Agents on Windows Systems
        • Gather the Information Required by the Configuration Program on Windows
        • Run the Web Agent Configuration Program on Windows
        • Run the Unattended or Silent Installation and Configuration Programs for Subsequent Agents on Windows
    • Install and Configure Apache-based Agents on UNIX/Linux
      • Agent Installation Compared to Agent Configuration
      • How to Install Agents on UNIX or Linux Systems
        • Gather the Information for the Installation
        • Run the Installation Program on UNIX/Linux
      • How to Install Agents on z/OS Systems
        • Gather the Information for the Installation
        • Run the CA SiteMinder® Agent Installation Program on z/OS
      • How to Configure Agents on UNIX/Linux
        • Gather the Information that the Configuration Program Requires on UNIX/Linux
        • Edit the configuration files for embedded Apache web servers on RedHat Linux
        • Source the Agent Environment Script on UNIX or Linux Operating Environments
        • Set the Library Path Variable on UNIX or Linux Systems
          • Set Web Agent Variables when using apachectl Script
        • Run the Web Agent Configuration Program on UNIX/Linux
        • Run the Unattended or Silent Installation and Configuration Programs for Agents on UNIX/Linux
        • Set the LD_PRELOAD Variable
        • Set the LD_ASSUME_KERNEL for Apache Agent on SuSE Linux 9 for zSeries
        • Set the CAPKIHOME Variable for Red Hat Linux 6 Systems
      • How to Configure Agents on z/OS Systems
        • Gather the Information that the Configuration Program Requires on z/OS
        • Set the Library Path Variable on z/OS
        • Run the CA SiteMinder® Agent Configuration Program on z/OS
        • (Optional) Run the Unattended or Silent Installation and Configuration Programs for CA SiteMinder® Agents on z/OS
      • Optional Agent Settings for UNIX/Linux
        • Set Web Agent Variables when using apachectl Script
        • Improve Server Performance with Optional httpd.conf File Changes
    • Dynamic Policy Server Clusters
      • Connect a Web Agent to a Dynamic Policy Server Cluster
    • Starting and Stopping Web Agents
      • Enable a Web Agent
      • Disable a Web Agent
      • Starting or Stopping Most Apache-based Agents with the apachectl Command
      • Start an IBM HTTP Server with the apachectl Command
      • Start an Oracle 11.g.x HTTP Server with the opmnctl Command
    • Upgrade a Web Agent to 12.52
      • Agent Upgrade Roadmap
      • How to Prepare for a CA SiteMinder® Agent Upgrade
        • Upgrade Process from CA SiteMinder® r6.x
        • Upgrade Process from CA SiteMinder® r12.0
        • Upgrade Process from CA SiteMinder® r12.0
        • Ensure LD_PRELOAD Variable Does Not Conflict with Existing Agent
        • Source the Environment Script on UNIX and Linux Operating Environments
        • Run the Installation Wizard to Upgrade your Agent on Windows
        • Run the Installation Wizard to Upgrade your Agent on UNIX/Linux
        • Set the Library Path Variable Before Configuring your Upgraded Agent on UNIX/Linux
        • Configure your Upgraded Agent on Windows
        • Configure your Upgraded Agent on UNIX/Linux
    • Operating System Tuning
      • Tune the Shared Memory Segments
      • How to Tune the Solaris 10 Resource Controls
    • Uninstall a Web Agent
      • Notes About Uninstalling Web Agents
      • Uninstall a Web Agent from a Windows Operating Environment
      • Uninstall a Web Agent from a UNIX System
      • Uninstall a CA SiteMinder® Agent from a z/OS System
    • Troubleshooting
      • Apache Server Shows shmget Failure On Startup
      • Apache Agent is Enabled but Default Server Page or Protected Resource Not Accessible
      • Apache Web Agent Not Operating
      • Non-english Input Characters Contain Junk Characters
    • Worksheets
      • Agent Installation Worksheet
      • Agent Configuration Worksheet
  • Web Agent Installation Guide for Domino
    • Preparation
      • Only Domino Server Procedures in this Guide
      • Hardware Requirements for CA SiteMinder® Agents
      • Preparation Roadmap for Domino Servers
      • How to Prepare for a Web Agent Installation on Domino Servers
        • Locate the Platform Support Matrix
        • Domino Server Preparations for UNIX Operating Environments
          • Set the DISPLAY For CA SiteMinder® Agent Installations on UNIX
          • Required Solaris Patches
        • Domino Server Preparations for Linux Operating Environments
          • Required Linux Patches
          • Required Linux Libraries
        • Policy Server Requirements
    • Install and Configure an Agent for Domino on Windows
      • Agent Installation Compared to Agent Configuration
      • How to Install and Configure an Agent for Domino on Windows
        • Gather the Information for the Installation Program
        • Run the Installation Program on Windows
        • Gather the Information that the Configuration Program Requires on Windows
        • Add the Domino Web Agent DLL (Windows)
        • Run the Web Agent Configuration Program on Windows
        • Run the Unattended or Silent Installation and Configuration Programs for Subsequent Agents on Windows
          • Configure the CGI Directory and CGI URL Path Settings on Windows Operating Environments (Optional)
          • Configure Alias Settings to Enable HTML Forms Authentication Schemes (Optional)
    • Install and Configure an Agent for Domino on UNIX/Linux
      • Agent Installation Compared to Agent Configuration
      • How to Install and Configure an Agent for Domino on UNIX/Linux
        • Gather the Information for the Installation
        • Run the Installation Program on UNIX/Linux
        • Gather the Information that the Configuration Program Requires for UNIX or Linux
        • Add the Domino Web Agent Library File (UNIX)
        • Source the Agent Environment Script on UNIX or Linux Operating Environments
        • Set the Library Path Variable on UNIX or Linux Systems
        • Run the Web Agent Configuration Program on UNIX/Linux
        • Run the Unattended or Silent Installation and Configuration Programs for Agents on UNIX/Linux
          • Configure Alias Settings to Enable HTML Forms Authentication
    • Dynamic Policy Server Clusters
      • Connect a Web Agent to a Dynamic Policy Server Cluster
    • Starting and Stopping Web Agents
      • Enable a Web Agent
      • Disable a Web Agent
    • Upgrade a Web Agent to 12.52
      • Agent for Domino Upgrade Roadmap
      • How to Upgrade an Agent for Domino
        • Upgrade Process from CA SiteMinder® r6.x
        • Upgrade Process from CA SiteMinder® r12.0
        • Run the Installation Wizard to Upgrade your Agent on Windows
        • Run the Installation Wizard to Upgrade your Agent on UNIX/Linux
        • Add the Web Agent Domino DLL file to your upgraded Agent on Windows
        • Add the Web Agent Domino Library file to your upgraded Agent on UNIX/Linux
        • Source the Agent Environment Script After an Upgrade on UNIX/Linux
        • Set the Library Path Variable Before Configuring your Upgraded Agent on UNIX/Linux
        • Configure your Upgraded Agent on Windows
        • Configure your Upgraded Agent on UNIX/Linux
    • Uninstall a Web Agent
      • Notes About Uninstalling Web Agents
      • Uninstall a Web Agent from a Windows Operating Environment
      • Uninstall a Web Agent from a UNIX System
    • Troubleshooting
      • Domino Web Agent Not Enabled but the Web Server has Started
      • Domino Agent Cannot Initialize When Local Configuration Mode is Used
      • Non-english Input Characters Contain Junk Characters
    • Worksheets
      • Agent Installation Worksheet
      • Web Agent Configuration Worksheet for Domino
  • Web Agent Installation Guide for Oracle iPlanet
    • Preparation
      • Only Oracle iPlanet Web Server Procedures in this Guide
      • Hardware Requirements for CA SiteMinder® Agents
      • Preparation Roadmap for Oracle iPlanet web servers
      • How to Prepare for a Web Agent Installation on an Oracle iPlanet Web Server
        • Locate the Platform Support Matrix
        • Oracle iPlanet Web Server Preparations for UNIX
          • Set the DISPLAY For CA SiteMinder® Agent Installations on UNIX
          • Required Solaris Patches
          • AIX Requirements
        • Oracle iPlanet Web Server Preparations for Linux
          • Required Linux Patches
          • Required Linux Libraries
        • Policy Server Requirements
    • Install and Configure an Oracle iPlanet Agent on Windows
      • Agent Installation Compared to Agent Configuration
      • How to Install and Configure the Agent for Oracle iPlanet on Windows
        • Gather the Information for the Installation Program
        • Run the Installation Program on Windows
        • Gather the Information Required by the Configuration Program on Windows
        • Run the Web Agent Configuration Program on Windows
        • Run the Unattended or Silent Installation and Configuration Programs for Subsequent Agents on Windows
        • Apply CA SiteMinder® Changes to Oracle iPlanet Configuration Files with Oracle iPlanet Administration Server Console for SunOne 6.1 Servers
        • Manually Configure Non-Default Server Instances, Virtual Servers, or Reverse Proxies for Oracle iPlanet Web Servers
        • Improve Server Performance with Optional httpd.conf File Changes
    • Install and Configure an Oracle iPlanet Agent on UNIX/Linux
      • Agent Installation Compared to Agent Configuration
      • How to Install and Configure a CA SiteMinder® Agent for Oracle iPlanet on UNIX/Linux
        • Gather the Information for the Installation
        • Run the Installation Program on UNIX/Linux
        • Gather the Information that the Configuration Program Requires on UNIX/Linux
        • Source the Agent Environment Script on UNIX or Linux Operating Environments
        • Set the Library Path Variable on UNIX or Linux Systems
        • Run the Web Agent Configuration Program on UNIX/Linux
        • Run the Unattended or Silent Installation and Configuration Programs for Agents on UNIX/Linux
        • Apply CA SiteMinder® Changes to Oracle iPlanet Configuration Files with Oracle iPlanet Administration Server Console for SunOne 6.1 Servers
        • Manually Configure Non-default Server Instances, Virtual Servers, or Reverse Proxies for Oracle iPlanet Web Servers
        • Modify the Oracle iPlanet Startup Script to Prevent Crashes when the Server Stops
    • Dynamic Policy Server Clusters
      • Connect a Web Agent to a Dynamic Policy Server Cluster
    • Starting and Stopping Web Agents
      • Enable a Web Agent
      • Disable a Web Agent
    • Upgrade a Web Agent to 12.52
      • Agent for Oracle iPlanet Upgrade Roadmap
      • How to Upgrade an Agent for Oracle iPlanet
        • Upgrade Process from CA SiteMinder® r6.x
        • Upgrade Process from CA SiteMinder® r12.0
        • Ensure LD_PRELOAD Variable Does Not Conflict with Existing Agent
        • Run the Installation Wizard to Upgrade your Agent on Windows
        • Run the Installation Wizard to Upgrade your Agent on UNIX/Linux
        • Source the Agent Environment Script After an Upgrade on UNIX/Linux
        • Set the Library Path Variable Before Configuring your Upgraded Agent on UNIX/Linux
        • Configure your Upgraded Agent on Windows
        • Configure your Upgraded Agent on UNIX/Linux
        • Apply Changes to your Upgraded CA SiteMinder® Files with the iPlanet Administration Console
        • Manually Configure any Non-Default Server Instances for your Upgraded CA SiteMinder® Agent
    • Operating System Tuning
      • Tune the Shared Memory Segments
      • How to Tune the Solaris 10 Resource Controls
    • Uninstall a Web Agent
      • Notes About Uninstalling Web Agents
      • Uninstall a Web Agent from a Windows Operating Environment
      • Uninstall a Web Agent from a UNIX System
    • Troubleshooting
      • Web Server Starts but Web Agent Not Enabled
      • smget Error Message When Web Server Starts
      • Reconfigured Web Agent Won't Operate
      • Oracle iPlanet Web Server Fails at Runtime
      • Non-english Input Characters Contain Junk Characters
    • Worksheets
      • Agent Installation Worksheet
      • Agent Configuration Worksheet
• Policy Server Guides
  • Policy Server Configuration Guide
    • SiteMinder Overview
      • SiteMinder Components
      • Policy Server Overview
      • Policy Server Configuration and Management Interfaces
      • Policy Server Object Types
        • Infrastructure Objects
        • Policy Objects
        • Global Objects
      • Policy Management Methods
    • Implementing Policy-based Security
      • Policy-based Security Overview
      • Strategies for Managing Security and Users
        • Access Control Lists
        • SiteMinder Security Policies
        • Manage the End-user Experience
          • How Privileges Are Established
          • How Content Is Personalized
          • How Sessions Are Managed
      • Security Model Implementation
        • Organize Security Model Requirements
        • Organization and Resource Requirement Considerations
          • How Organization Security Requirements Are Defined
          • Identify Resources and Roles
        • Define Task-Assessment Requirements
          • Define Access Control Requirements
        • Define Implementation Requirements
      • SiteMinder Application Roles
      • CA IdentityMinder Roles and Access Control
    • Administrative User Interface Management
      • Administrative UI Overview
      • Start the Administrative UI
      • Manage Policy Server Objects
        • Duplicate Policy Server Objects
        • View Policy Server Object Properties
        • Modify an Existing Policy Server Object
        • Delete a Policy Server Object
      • Manage Task-persistence Database
        • Cleanup Submitted Tasks
        • Delete Recurring Tasks
      • How the Web Agent and Policy Server Calculate Time
      • Protecting the Administrative UI with SiteMinder
        • How to Protect the Administrative UI with SiteMinder
        • Change the Authentication Scheme
        • Disable SiteMinder Authentication for the Administrative UI
    • SiteMinder Administrators
      • SiteMinder Administrators Overview
        • Default Superuser Administrator
        • Administrator Accounts
        • Legacy Administrator Accounts
        • Administrator Store Options
      • How to Configure an External Administrator Store
        • External Administrator Store Considerations
        • SSL Considerations
        • Gather Directory Server Information
        • Gather Database Information
        • Deploy a JDBC Data Source
        • Configure an LDAP Administrator Store Connection
        • Configure an RDB Administrator Store Connection
        • Migrate Legacy Administrator Permissions
        • Update External Administrator Store Credentials
          • Update Directory Server Credentials
          • Update Database Credentials
        • Modify the External Administrator Store Connection
      • How to Create an Administrator
        • Administrator Considerations
        • Create the Administrator Account
        • Verify that the Administrator has the Correct Privileges
      • Limit Administrator Account Scope Using Workspaces Overview
        • Workspace Objects
        • Scoped Administrators
      • How to Create a Scoped Administrator
        • Scoped Administrator Considerations
        • Create a Workspace
        • Create an Administrator and Assign a Workspace
        • Verify that the Administrator is Scoped
      • Administrator Use Cases
        • Superuser Creates Manager Admin
        • Superuser Creates a Workspace and Assigns it to Scope Manager Admin
        • Manager Admin Creates Junior Admin
        • Manager Admin Creates a Workspace and Assigns it to Further Scope Junior Admin
      • How to Create a Legacy Administrator
        • Legacy Administrator Considerations
        • Create the Legacy Administrator Record
        • Delegate Administrative UI Permissions
      • Disable an Administrator
      • Disable a Legacy Administrator
      • Restoring Administrator Access
      • How to Configure the Accessibility Mode for the Administrative UI
        • Open the Administrative UI to Change Policy Server Objects
        • Pick an Administrator Type
          • Create an Administrator
          • Create a Legacy Administrator
        • Configure the Accessibility Mode for the Administrator
    • User Sessions
      • User Session Overview
        • Non-Persistent and Persistent Cookies
        • Non-Persistent and Persistent Sessions
        • Session Tickets
        • How SiteMinder Manages User Sessions
      • How a User Session Begins
      • How Sessions Across Realms Are Maintained
      • How Sessions Across Multiple Cookie Domains Are Maintained
      • How a User Session Is Validated
      • How Session Information Is Delegated
      • Session Timeouts
      • How Agent Key Management and Session Timeouts are Coordinated
      • How a User Session Ends
      • Windows User Security Context
        • How Persistent Sessions for User Security Contexts Are Maintained
        • How Sessions Are Revalidated
        • Windows User Security Context Requirements
          • Configuration Overview
          • Supported Authentication Schemes
          • Active Directory and NetBIOS Names
          • Single Sign-on in Security Context
    • Agents and Agent Groups
      • Trusted Hosts for Web Agents
        • Register a Trusted Host with the Policy Server
        • Trusted Host Configuration Settings
          • Request Timeout
          • Operation Mode
          • Implement an Operation Mode
          • TCP/IP Connections
        • Delete Trusted Host Objects
      • Host Configuration Objects for Trusted Hosts
        • Copy a Host Configuration Object
        • Add Multiple Policy Servers to the Host Configuration Object
        • Configure Policy Server Clusters for a Host Configuration Object
      • SiteMinder Agents Overview
        • Web Agents
        • RADIUS Agents
        • Application Server Agents
        • Web Services Security (WSS) Agents
      • Web Agent Configuration Overview
        • Advantages of Centrally Configuring Web Agents
        • Web Agent Components
        • Policy Server Objects Related to Web Agents
        • Resource Protection with a SiteMinder Agent
      • How to Configure a Web Agent
        • Configure Web Agents Centrally
        • Create a Host Configuration Object
        • Configure Web Agents Locally
        • Combined Central and Local Configuration
          • Example of Using Central and Local Configuration
        • Create an Agent Object to Establish a Web Agent Identity
        • Configure an Agent Object for a 4.x Web Agent Identity
        • Set the Configuration Parameters in the Agent Configuration Object
      • Agent Configuration Object Overview
        • Copy an Agent Configuration Object
        • Create an Agent Configuration Object
        • Required Agent Configuration Object Parameters
          • Specify the IIS Proxy User
          • Specify the Domino Users
          • Specify the Agent Name
        • Modify Agent Configuration Parameters
      • Enable a Web Agent
      • Configure a RADIUS Agent
      • Agent Groups
        • Configure an Agent Group
        • Add Agents to an Agent Group
      • Custom Agents
        • Configure a Custom Agent Type
        • Create a Custom Agent Object for the Agent Identity
      • Agent Discovery Introduced
        • List Agent Instances
        • Configure the Policy Server Heartbeat Interval
    • User Directories
      • User Directory Connections Overview
        • LDAP Overview
          • General Information About LDAP
          • User Disambiguation in an LDAP Directory
          • LDAP Referrals
          • Directory Topology and LDAP Referrals
          • Enhanced LDAP Referral Handling
          • How the Policy Server Binds to an LDAP User Store
        • ODBC Database Overview
        • Active Directory Overview
        • Custom Directory Overview
      • Directory Attributes Overview
      • How to Configure a CA Directory User Directory Connection
        • Ping the User Store System
        • Configure CA Directory User Directory Connections
        • Enable User Store DSA Parameters
        • Enable Caching for a CA Directory User Store
        • Verify the CA Directory Cache Configuration
      • How to Configure a CA LDAP Server for z/OS User Directory Connection
        • CA LDAP Server for z/OS Overview
        • SiteMinder Features Not Supported by CA LDAP Server for z/OS (TSS)
        • CA Top Secret r12 (TSS) Backend Security Option
          • TSS Objectclass Hierarchy
          • Configure Policy Server Registry Entries for TSS
          • Configure CA LDAP Server for z/OS User Directory Connections
        • CA LDAP Server r15 for z/OS (ACF2) Backend Security Option
          • ACF2 Objectclass Hierarchy
          • Configure Policy Server Registry Entries for ACF2
        • CA LDAP Server r15 for z/OS (RACF) Backend Security Option
          • RACF Namespace Hierarchy
          • Configure Policy Server Registry Entries for RACF
        • Configure a Connection from the Policy Server to CA LDAP Server for z/OS
      • How to Configure an Oracle Directory Server Enterprise Edition User Directory Connection
        • Ping the User Store System
        • Configure Oracle Directory Server Enterprise Edition User Directory Connections
      • How to Configure a IBM Directory Server User Directory Connection
        • Ping the User Store System
        • Configure IBM Directory Server User Directory Connections
      • How to Configure a Domino User Directory as a User Store
        • Verify that a Domino User Directory Meets Policy Server Requirements
        • Ping the User Store System
        • Configure Domino Directory Connections
      • How to Configure a Novell eDirectory LDAP Directory Connection
        • Configure NetWare
        • Configure Anonymous LDAP Access on Novell eDirectory
        • Special Access for the SiteMinder Administrator
        • Create a Novell eDirectory User Account for SiteMinder Administration
        • Ping the User Store System
        • Configure Novell eDirectory LDAP Directory Connections
      • How to Configure an Active Directory LDS User Directory Connection
        • Ping the User Store System
        • Configure Active Directory LDS User Store Directory Connections
      • How to Configure an Active Directory Directory Connection
        • Active Directory Considerations
        • LDAP Namespace for an Active Directory Connection
        • AD Namespace for an Active Directory Connection
        • Ping the User Store System
        • Configure Active Directory Connections
      • How to Configure an Active Directory Global Catalog User Directory Connection
        • Ping the User Store System
        • Configure Active Directory Global Catalog Directory Connections
      • How to Configure an Oracle Internet Directory User Directory Connection
        • LDAP Referral Limitation for Oracle Internet Directory User Directory
        • Ping the User Store System
        • Create an Organizational Unit for an OID Directory
        • Configure Oracle Internet Directory Connections
      • How to Configure OpenLDAP Server User Directory Connections
        • Create a User Store
        • Configure OpenLDAP Directory Server User Directory Connections
      • How to Configure a Red Hat Directory Server User Directory Connection
        • Ping the User Store System
        • Configure Red Hat Directory Server User Directory Connnections
      • How to Configure an ODBC User Directory Connection
        • Ping the User Store System
        • Configure ODBC Directory Connections
        • SQL Server User Store Case Insensitivity and Extra Trailing Spaces Password Issues
      • How to Configure a Custom User Directory Connection
        • Ping the User Store System
        • Configure Custom Directory Connections
      • How to Configure an LDAP User Directory Connection over SSL
        • Before You Configure a Connection over SSL
        • Create the Certificate Database Files
        • Add the Root Certificate Authority to the Certificate Database
        • Add the Server Certificate to the Certificate Database
        • List the Certificates in the Certificate Database
        • Configure the User Directory Connection for SSL
        • Point the Policy Server to the Certificate Database
        • Verify the SSL Connection
      • Configure an Oracle User Directory Connection Over SSL
        • How the Policy Server connects to an Oracle Database over SSL
          • Configure SSL on Windows
          • Configure SSL on UNIX
      • LDAP Load Balancing and Failover
        • Port Number Considerations
        • Configure Failover
        • Configure Load Balancing
        • Configure Load Balancing and Failover
        • Use Case - Load Balancing and Failover
      • Configure ODBC Data Source Failover
      • SQL Query Schemes
        • Configure a SQL Query Scheme
        • Add SQL Query Schemes to ODBC User Directory Connections
        • How to Configure SQL Query Schemes for Authentication via Stored Procedures
        • Asynchronous Call Support During Failover and Connection Pooling
          • Asynchronous Call Support Configuration
          • ODBC Connection Pooling
      • Define the Same User Directory Connection in Multiple Policy Stores
      • View User Directory Contents
      • Search User Directories
      • Universal IDs
        • How SiteMinder Uses UIDs
      • Named Expressions
        • Benefits of Named Expressions
        • Define Named Expressions
          • Virtual User Attributes
            • Virtual User Attribute Use Case
            • Define a Virtual User Attribute
          • User Classes
            • User Class Use Case
            • Define a User Class
          • How to Use the Expression Editor
            • Create a Condition Containing a Function
            • Create a Condition Containing an Operation
            • How to Edit an Expression
              • Modify a Condition in an Expression
              • Delete a Condition from an Expression
              • Group the Conditions in an Expression
              • Change a Boolean Operator in an Expression
          • Apply Named Expressions
      • User Attribute Mapping
        • User Attribute Mapping Overview
        • How Attribute Mapping Works
        • Define an Attribute Mapping
          • Alias
            • Alias Attribute Use Case
            • Create an Alias Attribute Mapping
          • Group Name
            • Group Name Use Case
            • Create a Group Name Attribute Mapping
          • Mask
            • Mask Use Case
            • Create a Mask Attribute Mapping
            • Bit Masks in Mask Attribute Mapping
          • Constant
            • Constant Use Case
            • Create a Constant Attribute Mapping
          • Expression
            • Expression Use Case
            • Create an Expression Attribute Mapping
        • Advanced User Attribute Mapping Examples
          • Map a First Name Attribute with an Alias Mapping Type
          • Map a Last Name Attribute with an Alias Mapping Type
          • Map a Sort Name Attribute with Expression and Alias Mapping Types
          • Map Customers with Group and Constant Mapping Types
          • Map the Account Status with the Mask and Expression Mapping Types
    • Directory Mapping
      • Directory Mapping Overview
        • Authorization Identity Mappings
        • Validation Identity Mappings
        • Directory Mapping Methods
      • Directory Mapping Requirements
      • Identity Mappings
        • Supported Directories for Identity Mappings
        • Identity Mapping Entry Types
        • Using Complex User Search Expressions
        • How to Configure an Authentication and Authorization Identity Mapping
          • Configure an Authorization Identity Mapping
          • Assign an Authorization Identity Mapping to a Realm
        • How to Configure an Authentication and Validation Identity Mapping
          • Configure a Validation Identity Mapping
          • Assign a Validation Identity Mapping to a Realm
        • Configure a Default Global Validation Directory Mapping
      • Legacy Directory Mapping Methods
        • How to Configure an Authentication and Authorization Directory Mapping
          • Configure a Directory Mapping
          • Assign an Authorization Directory to a Realm
        • How to Configure an AuthValidate Directory Mapping
          • Configure an AuthValidate Directory Mapping
      • Remove Directory Mappings from Realms
      • Directory Mapping Examples
        • Employee Accesses an Engineering Realm Resource
        • Temporary Employee Accesses a Quality Assurance Realm Resource
        • Directory Mapping by Universal ID
        • Directory Mapping Case Sensitivity
        • Identity Mapping by Complex User Search Criterion
      • Directory Mapping and Responses
    • Authentication Schemes
      • Authentication Schemes Overview
        • Supported Authentication Schemes and Password Policies
        • Limit Policy Server Search to One User Store during Authentication
        • Authentication Scheme Processing
        • Authentication Scheme Types
          • Basic Authentication Schemes
          • HTML Forms-based Authentication Schemes
          • Windows Authentication Scheme
          • X.509 Client Certificate Authentication Schemes
          • Proxy Authentication Schemes
          • Digest Authentication Schemes
          • Anonymous Authentication Schemes
          • Custom Authentication Schemes
          • Open Standard Web-based Schemes
          • Authentication over SSL
        • Persisting Authentication Context Data
        • Protection Levels
        • Authentication Schemes and Credential Requirements
        • Set Up an Authentication Scheme Object in the Policy Server User Interface
          • Web Server
          • Policy Server
        • Multiple Instances of a Single Authentication Scheme Configuration
      • How to Configure a Basic Authentication Scheme
        • Review Basic Scheme Prerequisites
        • Configure a Basic Authentication Scheme
      • How to Configure a Basic Over SSL Authentication Scheme
        • Verify That Basic over SSL Authentication Scheme Prerequisites Are Met
        • Configure a Basic Over SSL Authentication Scheme
      • How to Configure HTML Forms Authentication
        • Inform the Agent Owner that HTML Forms Authentication is Required
        • Configure HTML Forms Authentication Template Files
          • Use Secure HTML Forms Authentication Templates
          • Use a Different File Extension for Forms Authentication Template Files
          • Customize Forms Authentication Templates
            • Special Name/Value Pairs
            • How Name/Value Pairs are Generated in FCC Files
            • Localization Name/Value Pairs
            • Collect Additional Attributes
          • Tell Users Why Login Failed
        • Configure an HTML Forms Authentication Scheme
          • Review the HTML Forms Scheme Prerequisites
            • Custom Authentication Scheme Library Writing and Installation
          • Configure an HTML Form Authentication Scheme
            • Enable Non-browser Client Support
        • How to Enable FCC Internationalization
          • Enable the Localization Parameter
          • Set Preferred Locales
            • Set Preferred Locale Using a User Agent
              • Use HTTP Header SMCLIENTLOCALE
              • Use HTTP Header Accept-Language
            • Set Preferred Locale using the Administrative UI
              • Set the SMSERVERLOCALE Response Header Variable
              • Set the DefaultLocale ACO Property
            • Set Preferred Locale Using the WebAgent.conf File
          • Define the Configuration Modes Order of Precedence
          • Localize Forms-based Authentication and Basic Password Services Files
            • Customize CA SiteMinder® to Support a New Locale
          • Localize Error Response Files
            • Customize CA SiteMinder® to Support a New Locale
              • Configure the Web Agent
              • Configure the Web Agent ACO
          • Migrate Localized Files
            • Migrate the Forms-based Authentication Files and Basic Password Services Files
            • Migrate the Error Responses Files
      • Windows Authentication Schemes
        • Verify that Windows Authentication Prerequisites Are Met
        • Review Windows Authentication Scheme Considerations
        • Configure a Windows Authentication Scheme
      • How To Configure Kerberos Authentication
        • Configure Kerberos at the Domain Controller
          • KDC Configuration on Windows Example
          • KDC Configuration on UNIX Example
        • Configure Kerberos Authentication at the Policy Server
          • Kerberos Configuration at the Policy Server Example
        • Kerberos Authentication Configuration at the Web Server
        • Configure Kerberos Authentication at the Windows Workstation
        • Configure a CA SiteMinder® Kerberos Authentication Scheme
        • Configure Kerberos External Realm on Windows Host
        • Troubleshooting SiteMinder Kerberos Authentication
      • Information Card Authentication Schemes
        • Introduction to Information Cards
        • Introduction to Identity Selectors
          • Windows CardSpace
        • SiteMinder Information Card Authentication Scheme (ICAS)
          • ICAS Overview
          • ICAS Terms
          • ICAS Files
          • ICAS Prerequisites
          • Configure the Java Runtime Environment (JRE) for ICAS
          • How to Configure the Policy Server for ICAS
            • Configure an ICAS Properties File
              • Configure ICAS Command Chains
              • Key Class Files to Configure ICAS
              • Class Files to Check the Values of Claims
              • Class Files to Debug
            • Store Claims for Later Use in Active Responses
            • Configure the Certificate Data Store for ICAS
            • Configure a User Directory for ICAS
            • Create an Instance of ICAS
            • Configure an Active Response that Retrieves a Claim Value
            • Configure Support for the ICAM White List
      • RADIUS CHAP/PAP Authentication Schemes
        • PAP Overview
        • CHAP Overview
        • RADIUS CHAP/PAP Scheme Overview
        • RADIUS CHAP/PAP Scheme Prerequisites
        • Configure a RADIUS CHAP/PAP Authentication Scheme
      • RADIUS Server Authentication Schemes
        • RADIUS Server Scheme Prerequisites
        • Configure a RADIUS Server Authentication Scheme
      • SafeWord Server Authentication Schemes
        • SafeWord Server Scheme Prerequisites
        • Configure a SafeWord Server Authentication Scheme
      • SafeWord Server and HTML Forms Authentication Schemes
        • SafeWord Server and HTML Forms Scheme Prerequisites
        • Configure a SafeWord Server and HTML Forms Authentication Scheme
      • SecurID Authentication Schemes
        • How to Configure a SecurID Authentication Scheme
          • SecurID Scheme Prerequisites
          • Configure a SecurID Authentication Scheme
        • How to Configure a SecurID HTML Form Authentication Scheme
          • SecurID HTML Form Scheme Prerequisites
          • Configure a SecurID HTML Form Authentication Scheme
        • SecurID HTML Form Support for Re-activating and Verifying SecurID Users
        • SecurID HML Form Support for Activating New User Accounts
        • How to Configure SecurID HTML Form Authentication Support for Risk-Based Authentication
          • Verify That You Have the Latest CA SiteMinder® RBA Integration Script Template
          • Generate a Custom CA SiteMinder® RBA Integration Script
          • Provide the Custom SiteMinder RBA Integration Script to Agent Owners for Deployment
          • Agent Owner Deploys the Custom CA SiteMinder® RBA Integration Script on Each Web Server
      • X.509 Client Certificate Authentication Schemes
        • Extracting a Certificate for Certificate Authentication
        • How SiteMinder Uses Certificate Data to Identify Users
        • X.509 Client Certificate Scheme Prerequisites
        • Configure an X.509 Certificate Authentication Scheme
      • X.509 Client Certificate and Basic Authentication Schemes
        • X.509 Client Certificate and Basic Scheme Prerequisites
        • Configure an X.509 Certificate and Basic Authentication Scheme
      • X.509 Certificate or Basic Authentication Schemes
        • X.509 Client Certificate or Basic Scheme Prerequisites
        • Configure an X.509 Certificate or Basic Authentication Scheme
      • X.509 Client Certificate and HTML Forms Authentication Schemes
        • X.509 Client Certificate and HTML Forms Scheme Prerequisites
        • Agent API Support
        • Configure an X.509 Certificate and HTML Forms Authentication Scheme
      • X.509 Client Certificate or HTML Forms Authentication Schemes
        • X.509 Client Certificate or HTML Forms Scheme Prerequisites
        • Agent API Support
        • Configure an X.509 Certificate or HTML Forms Authentication Scheme
      • Anonymous Authentication Schemes
        • Anonymous Scheme Prerequisites
        • Configure an Anonymous Authentication Scheme
      • Custom Authentication Schemes
        • Custom Scheme Prerequisites
        • Configure a Custom Authentication Scheme
      • How to Configure an OAuth Authentication Scheme
        • OAuth Authentication Process
        • Register an Application with an OAuth Provider
        • Enable the OAuth Plug–in
        • Modify the OAuth Forms Credential Collector
        • Modify the OAuth Provider Configuration File
        • Disable FCCCompatMode at the Agent
        • Configure the OAuth Authentication Scheme
      • OpenID Authentication Scheme
        • How OpenID Authentication Works in CA SiteMinder®
        • How to Configure an OpenID Authentication Scheme
          • Enable the Web Agent OpenID Plug–in
          • Customize the OpenID Forms Credential Collector
          • Modify the OpenID Provider Configuration File
          • Modify the Agent Configuration Object
          • Disable the FCCCompatMode Parameter
          • Configure the OpenID Authentication Scheme
      • Legacy Federation Authentication Schemes
      • Impersonation Authentication Schemes
        • Impersonation Scheme Prerequisites
        • Configure an Impersonation Authentication Scheme
    • Certificate Mapping and Validity Checking for X.509 Certificates
      • Certificate Mapping for X.509 Client Authentication Schemes
        • Configure a Certificate Mapping
        • Test a Certificate Mapping
        • Custom Mapping Expressions
          • EnableCustomExprOnly Registry Key
          • Enable LegacyCertMapping Registry Key
          • Custom Mapping: Example 1
          • Custom Mapping: Example 2
          • Custom Mapping: Example 3
          • Template String Usage
          • Map to the Certificate Serial Number or IssuerDN
        • Custom Certificate Mapping for Multiple Attributes of the Same Type
          • Map to Non-Required Attributes
      • Certificate Validity Checking (optional)
        • Prerequisites for Implementing Validity Checking
        • Certificate Revocation List Checking
          • Reason Code Requirements for CRLs
          • Size Limits for CRLs
          • CRL Signature Verification
          • CRL Distribution Points to Locate CRLs
          • Configure Certificate Revocation List Checking
          • Accessing a CRL through an HTTP Proxy
        • Online Certificate Status Protocol Checking (OCSP)
          • OCSP Prerequisites
          • Create an OCSP Configuration File
          • Configure OCSP Checking
          • Accessing an OCSP Responder through a HTTP Proxy
          • Signing OCSP Requests (Optional)
          • Configure OCSP Request Signing
        • Failover Between OCSP and CRLs
          • Configure Failover Between OCSP and CRLs
        • Troubleshooting Certificate Validation
    • Strong Authentication
      • Credentials Selector Introduction
      • Credentials Selector Use Case
        • Request Access with Password And/Or Certificate Authentication
        • Request Access with Windows Authentication
        • Request Access with SecurID Authentication
        • Request Access with SafeWord Authentication
      • Credentials Selector Solution for the Use Case
      • Establish a Front-End Authentication Scheme
        • Use a Forms Credential Collector (FCC)
        • Configure the selectlogin.fcc File for Front-End Authentication
          • Selectlogin.fcc Configuration Details
          • Sample selectlogin.fcc File
        • Configure the Front-end Authentication Scheme
      • Manage Unsuccessful Authentication Attempts
      • Set Up Back-end Processing
        • Set Up Authentication Schemes for Back-End Processing
        • Set Up a Policy Domain for Back-End Processing
        • Configure Realms for the Back-end Policy Domain
        • Create Rules for the Back-end Policy Domain
        • Configure AuthContext Responses for the Back-end Policy Domain
        • Configure Policies for Back-end Credential Selection
          • Create an Authentication Context Policy
          • Create a Protection Policy
      • Protect the Sample Application
        • Realms and Rules for the Sample Application
        • Configure a Policy to Protect the Sample Application
        • Configure Responses for the Sample Application
      • Test the Credentials Selector Solution
    • Define the Security Policy for a Web Application in an Application Object
      • Advantages of Securing Your Resources Using Application Objects
      • How to Define the Security Policy for a Web Application in an Application Object
        • Verify Your Administrative Rights
        • Create the Application Object and Define the General Properties of Your Security Policy
        • Designate the Application Resources
        • Create Roles That Identify the Users That Can Access the Protected Resources
        • (Optional) Configure Responses to Customize the Web Application
        • (Optional) Configure Response Groups to Customize the Web Application
        • Configure a Policy to Associate Resources with User Roles
        • (Optional) Configure Advanced Application Options
          • (Optional) Configure Custom Attributes to Add Metadata About the Application
          • Configure Confidence Levels in Applications
          • Configure CA DataMinder Content Classifications in Applications
          • Configure Advanced Policy Components for Applications
      • Use Cases for Defining Application Security Policies Using Application Objects
        • Application Security Policy to Protect a Web Portal
          • Identify the Web Portal and Select the User Directory
          • Create the Web Portal Resources
          • Create the Web Portal Roles
          • Create the Web Portal Policy
        • Application Security Policies Based on Roles
          • Identify the Application that Needs Protecting
          • Designate the Application Resources
          • Create an Employee Role
          • Create a Manager Role
          • Use a Response to Supply Data to the Application
          • Establish a Policy Based on Roles
          • Include Metadata that Describes the Application
        • Application Security Policies with User Mapping and Named Expressions
          • Establish Mappings for the Two User Directories
          • Define Named Expressions to Check the Credit Limit
          • Protect the Online Shopping Application
          • Designate the Resource Requiring Protection
          • Configure the Customer Role
          • Customize the Application with a Response
          • Configure the Security Policy for the Shopping Application
          • Provide Metadata to Describe the Application
        • Application Security Policy Based on CA DataMinder Content Classifications
          • Protect the Shared Documents Directory
          • Protect All Document Resources
          • Create the Human Resources Role
          • Establish a Policy Based on the Human Resource Role
    • Domains
      • Policy Domain Overview
      • Domains and User Membership
      • How to Configure a Policy Domain
        • Configure a Policy Domain
        • Assign User Directories
        • Create a Realm
          • Configure a Realm with a SiteMinder Web Agent
          • Configure a Realm with a RADIUS Agent
      • Add CA IdentityMinder Environments to a Domain
      • Disable Global Policy Processing for a Domain
      • Modify a Domain
      • Delete a Domain
    • Realms
      • Realms Overview
      • Confidence Levels Introduced
      • Identify a Resource by Agent, Realm, and Rule
        • Unprotected Realms, Rules, and Policies
      • Nested Realms
      • Realms in Request Processing
        • Examples
      • Configure a Realm
        • Configure a Realm Protected by a SiteMinder Web Agent
        • Configure a Realm Protected by a RADIUS Agent
      • Modify a Realm
      • Delete a Realm
      • Configure a Nested Realm
      • Flush a Single Realm from the Resource Cache
    • Rules
      • Rules Overview
        • How Rules Work as Part of a Policy
        • How the Policy Server Processes Rules
        • Rules and Nested Realms
        • Rule Actions
          • Web Agent Actions
          • WSS Agent Actions
          • Authentication Events
          • Authorization Events
          • Impersonation Events
        • Advanced Rule Options
      • Configure a Rule for Web Agent Actions
      • Configure a Rule for Authentication Event Actions
      • Configure a Rule for Authorization Event Actions
        • Policy Considerations for OnAccessReject Rules
      • Configure a Rule for Impersonation Event Actions
      • Resource Matching and Regular Expressions
        • Standard Resource Matching
        • Regular Expressions for Resource Matching
      • Enable and Disable Rules
      • Advanced Rule Options
        • Add Time Restrictions to Rules
        • Configure an Active Rule
      • Delete a Rule
    • Rule Groups
      • Rule Group Overview
      • Create a Rule Group
      • Add Rules to a Rule Group
      • Modify a Rule Group
      • Delete a Rule Group
    • Responses and Response Groups
      • Responses
        • Response Types
          • Web Agent Responses
          • RADIUS Responses
        • Response Attributes
          • Web Agent Response Attributes
          • RADIUS Agent Response Attributes
        • Responses and Directory Mappings
      • Configure a Response
        • Configure Response Attributes
          • Response Attribute Types
          • Configure a Web Agent Response Attribute
          • Configure a RADIUS Response Attribute
        • Use Variable Objects in Responses
          • Configure a Response Attribute that Contains a Variable
          • Select Users for Inclusion in a Response Attribute
          • Select a Variable Using Variable Lookup
        • Configure Response Attribute Caching
        • Edit a Response
        • Delete a Response
      • How to Create a Web Agent Response That Generates an Open Format Cookie
        • Open the Administrative UI to Change Policy Server Objects
        • Create a Web Agent Response that Generates an Open Format Cookie
        • Add the Web Agent Response to a Rule
        • Add the Rule to a Policy
        • Customize Your Applications Using the Samples as Guides
      • SiteMinder Generated User Attributes
        • Availability of CA SiteMinder®-generated Response Attributes
      • Response Groups
        • Configure a Response Group
        • Add Responses to a Response Group
        • Modify a Response Group
        • Delete a Response Group
    • Policies
      • Policy Overview
        • Policies Explanation
        • Policy Bindings
        • Expressions in Policies
        • Confidence Levels in Policies
      • How to Configure a Policy
        • Create the Policy
        • Add Users to a Policy
        • Add Rules to a Policy
        • Associate a Rule with a Response or Response Group
        • Associate a Rule with a Global Response
        • Add an Expression to a Policy
        • Add a Confidence Level to a Policy
        • Add CA IdentityMinder Roles
        • Exclude CA IdentityMinder Roles
      • Exclude a User or Group from a Policy
      • Allow Nested Groups in Policies
      • AND Users/Groups Check Box
      • Specify AND/OR Relationships between Users/Groups
      • Add Users by Manual Entry
      • Enhance Policy Server’s LDAP Authorization Performance
      • Add an LDAP Expression to a Policy
      • Enable and Disable Policies
      • Advanced Policy Options
        • Allowable IP Addresses for Policies
          • Specify a Single IP Address
          • Specify a Host Name
          • Add a Subnet Mask
          • Add a Range of IP Addresses
        • Time Restrictions for Policies
          • How Rule and Policy Time Restrictions Interact
          • Add Time Restrictions to a Policy
        • Configure an Active Policy
        • How to Require Re-authentication for Sensitive Resources
          • The Policy Administrator and the Agent Owner Review the Prerequisites
          • The Agent Owner Creates an .FCC File That Contains the Directive for Sensitive Resources
          • The Policy Administrator Opens the Administrative UI to Change Policy Server Objects
          • The Policy Administrator Disables the FCCCompatMode Parameter
          • The Policy Administrator Modifies a Policy to Protect the Sensitive Resource
            • The Policy Administrator Protects the URL of the Sensitive Resource with a GET/POST Rule
            • The Policy Administrator Creates an OnAccessValidateIdentity Rule for the Sensitive Resource
            • The Policy Administrator Creates a Response That Redirects to the .FCC File
          • The Policy Administrator Restarts the Policy Server
      • Policy Binding Establishment
        • Policy Bindings for LDAP Directories
          • Bind Policies to Users with the Manual Entry Field
          • Bind Policies to Users with the Search Feature
          • Bind Policies to User Attributes
          • Bind Policies to User Groups
          • Bind Policies to Organizational Roles
          • Bind Policies to Group Attributes
          • Bind Policies to Organization Units
          • Bind Policies to Organizations
          • Bind Policies to Organization Attributes
          • Binding Policies to Custom Object Classes
        • Policy Bindings for WinNT User Directories
          • Bind Policies to Users with the Manual Entry Field
          • Bind Policies to Users with the Search Feature
          • Bind Policies to User Groups
        • Policy Bindings for Microsoft SQL Server and Oracle User Directories
          • Bind Policies to Users with the Manual Entry Field
          • Bind Policies to Users with the Search Feature
          • Bind Policies to User Groups
          • Bind Policies to User Attributes
      • Delete a Policy
      • Bind Policies to SQL Queries
      • Policy Processing
        • Sample SiteMinder Configuration with Nested Realms
          • User Directory
          • Nested Realms and Resources
          • Policies and Responses
        • Authentication Processing for Hierarchical Policies
          • Successful Authentications
          • Rejected Authentication Attempts
          • Unsuccessful Authentication Attempts
        • Authorization Processing for Hierarchical Policies
          • Policy Processing for Authorized Users
          • Policy Processing for Unauthorized Users
        • Directory Mapping for Hierarchical Policies
    • Variables
      • eTelligent Rules
        • Component Requirements for eTelligent Rules
        • CA SiteMinder® eTelligent Rules Benefits
        • eTelligent Rules Configuration
          • eTelligent Rules Properties Files
          • JVMOptions.txt File
          • Modify the LoggerConfig.properties File
      • Variables Overview
        • Variable Types
          • Static Variables
          • Request Context Variables
          • User Context Variables
          • Form Post Variables
          • Web Services Variables
        • Variable Use in Policies
        • Variable Use in Responses
      • Web Service Variables
        • Component Requirements for Web Service Variables
        • Security Requirements When Resolving Web Services Variables
        • Configure the Web Service Variable Resolver
        • Sample WebServiceConfig.properties Configuration File
        • Certificate Authorities and Web Services Variables
      • Create a Variable
        • Create a Static Variable
        • Create a Request Context Variable
        • Create a User Context Variable
        • Configure Support for Multiple Value User Attribute Results When Processing User Context Variables
        • Create a Form Post Variable
        • Create a Web Services Variable
    • Key and Certificate Management
      • Certificate and Private Key Usage by CA SiteMinder®
        • Signing and Verification Operations
        • Encryption/Decryption Operation
        • Certificates for SSL Connections
        • Certificates To Secure the Artifact Back Channel
      • Formats Supported by the Certificate Data Store
      • Import Trusted Certificates and Key/Certificate Pairs
        • Import a Key/Certificate Pair from an Existing File
        • How to Generate a Key/Certificate Pair
          • Generate a Certificate Request
          • Import a Signed Certificate Response
        • Generate a New Certificate Signing Request
        • Update Certificates in the Certificate Data Store
      • Export Certificate and Key Data
      • Certificate Authority (CA) Certificate Usage
        • Import a CA Certificate
      • Check Certificate Validity with CRLs
        • Add a CRL for Certificate Management
        • Update a CRL
      • Check Certificate Validity with OCSP
        • Failover Between OCSP and CRL Checking
    • Global Policies, Rules, and Responses
      • Global Policies
        • Global Policy Object Characteristics
        • SiteMinder Global Policy Concept
        • Global Policy Processing
      • How to Configure Global Policies
        • Global Rules
          • Global Rules for Authentication Events
            • Create a Global Rule for Authentication Events
          • Global Rules for Authorization Events
            • Policy Considerations for OnAccessReject Rules
            • Create a Global Rule for Authorization Events
          • Enable and Disable Global Rules
          • Add Time Restrictions to Global Rules
          • Configure an Active Global Rule
          • Delete a Global Rule
        • Global Response Objects
          • Configure a Global Response
        • Response Attributes for Global Responses
          • Global Response Attribute Types
          • Configure a Global Web Agent Response Attribute
        • How to Configure Global Policy Objects
          • Create the Global Policy
          • Add Global Rules to a Global Policy
          • Associate a Global Rule with a Response
      • Enable and Disable Global Policies
      • Configure a Global Active Policy
      • Allowable IP Addresses for Global Policies
        • Specify a Single IP Address for a Global Policy
        • Add a Host Name for a Global Policy
        • Add a Subnet Mask for a Global Policy
        • Add a Range of IP Addresses for a Global Policy
      • Add and Remove Global Policy Time Restrictions
    • Impersonation
      • Impersonation Overview
      • Impersonation Process
      • Security Considerations for Impersonation
        • Effects of Authentication Scheme Protection Levels
        • Session Idle Timeouts
        • Restricting Impersonation
        • Impersonation Realms and Events
      • Policy Server Objects for Impersonation
        • How an Impersonation Session is Initiated
        • Configure an Agent to Use startimp.fcc
        • Configure an Impersonation Authentication Scheme
        • Enable Impersonation through an .fcc File
          • Basic .fcc Requirements for Impersonation
          • FCC Directives for Impersonation
          • Obtain the Session Specification using an FCC
          • Example .fcc Files for Impersonation
          • Effects of FCCCompatMode
        • Impersonation Event Configuration
        • Configure Policies for Impersonation
        • Multiple Cookie Domain Support
      • Sample Implementation of Impersonation
        • Sample Impersonation Implementation Assessment
        • Sample Forms for Impersonation
          • Forms for Initiating the Impersonation Process
          • Impersonation Result Forms
          • Impersonation Logoff Forms
    • Password Policies
      • Password Services Overview
      • How to Configure Password Policies
        • Password Policy Considerations
        • Create Password Policies
        • Configure Password Expiration
        • Configure Password Composition
        • Password Regular Expressions
          • Regular Expressions Syntax
          • Configure Regular Expression Matching
        • Configure Password Restrictions
        • Configure Advanced Password Options
        • Remove the Login ID When Redirecting for Password Services
      • CA Directory Password Policy Control
      • User-initiated Password Changes
        • Add a Change Password Link
        • Password Self-Changes
        • Enable Password Change Failure Messages
      • Password Policy Troubleshooting
        • New User Passwords are Rejected
        • User Accounts are Mistakenly Disabled
        • User Accounts are Prematurely Disabled
        • Password Changes are Forced
        • LDAP Users Do Not Disable
        • Active Directory Users Cannot Change Passwords
        • Incorrect Password Message Does Not Appear
    • Enhanced Session Assurance with DeviceDNA™
      • How to Configure Enhanced Session Assurance with DeviceDNA™
        • Limitations of Enhanced Session Assurance with DeviceDNA™
        • Configure your CA SiteMinder® SPS Environment for Enhanced Session Assurance with DeviceDNA™
        • Configure Your CA SiteMinder® Environment for Enhanced Session Assurance with DeviceDNA™
        • Create Enhanced Session Assurance with DeviceDNA™ end points
        • Add endpoints to your realms
        • Add end points to your application components
        • Enable Enhanced Session Assurance with DeviceDNA™ on your partnerships
      • How to Configure Enhanced Session Assurance with DeviceDNA™ During an Upgrade
        • Limitations of Enhanced Session Assurance with DeviceDNA™
        • Stop a Windows Policy Server
        • Stop a UNIX Policy Server
        • Audit Store Upgrade Scripts
          • Run the Audit Store Upgrade Script for Oracle Databases
          • Run the Audit Store Upgrade Script for Microsoft SQL Server Databases
          • Run the Audit Store Upgrade Script for IBM DB2 Databases
          • Run the Audit Store Upgrade Script for MySQL Databases
        • Start a Windows Policy Server
        • Start a UNIX Policy Server
        • Configure your CA SiteMinder® SPS Environment for Enhanced Session Assurance with DeviceDNA™
        • Configure Your CA SiteMinder® Environment for Enhanced Session Assurance with DeviceDNA™
        • Create Enhanced Session Assurance with DeviceDNA™ end points
        • Add endpoints to your realms
        • Add end points to your application components
        • Enable Enhanced Session Assurance with DeviceDNA™ on your partnerships
    • SiteMinder Test Tool
      • Test Tool Overview
      • Configure Your Test Environment Agent
        • Start the Test Tool on Windows
        • Start the Test Tool on UNIX
        • How to Use the Test Tool in FIPS-only Environments
          • Start the Test Tool in a Specific FIPS Mode Using Command-line Options
          • Define the Default FIPS Mode By Setting the CA_SM_PS_FIPS140 Environment Variable
        • Policy Server Identification
          • Set Up the Policy Server for Version 4 Agents and RADIUS Agent Simulations
          • Policy Server Information for Version 5 Agents
        • Select a Test Mode
        • Specify Resource Information
        • Specify User Credentials
        • Set the Encoding Spec
        • Save and Load Test Configurations in a Test Tool Settings File
        • (Optional) Regulate Test Tool Connections to the Policy Server
      • Run a Functionality Test
        • (Optional) Record Your Test in a Command Script File for Regression and Stress Testing
        • Functionality Test Results
        • Calculate an Average Elapsed Time
      • Perform a Regression Test by Playing Back a Test Recorded in a Command Script File
      • Run a Stress Test
        • Configure a Thread Control File
        • Perform a Stress Test by Running a Thread Control File in Advanced Playback Mode
        • (Optional) Configure How the Test Handles Usernames
        • (Optional) Configure the Sleep Time Between Policy Server Requests to Simulate a Steady Load
        • (Optional) Configure the Test Tool to Write Playback Test Results to a File in CSV Format
        • Report Viewing
      • Certificate-based Authentication Tests
        • Certificate Attributes that Require Custom Mappings
        • Custom Attribute Mappings for Testing
          • Issuer DN Mapping
          • Create Custom Certificate Mappings
    • Troubleshooting
      • Non-english Input Characters Contain Junk Characters
      • Error Message from Advanced Authentication Server
      • "Token not Found" Error
    • Troubleshooting SSL Authentication Schemes
      • Overview
        • Determine SSL Connection Ability
      • SSL Configuration
        • Enable the Web Server to Trust Client Certificates in Netscape
          • Configure the Netscape Web Server to use SSL
          • Establish Trust for the Netscape Certificate Authority
        • Enable the Web Server to Trust Client Certificates in Windows
          • Configure the IIS Web Server to use SSL
          • Install the IIS Web Server Certificate
        • Enable the Web Server to Trust Client Certificates in Apache
          • Installing the Apache Web Server Certificate
      • SSL Troubleshooting
        • There Was No Prompt for a Certificate
        • After Following Previous Procedure, Still No Certificate Prompt
          • Verify That All Firefox Browsers Are Configured to Ask Every Time
          • Verify That All Web Servers Are Configured to Use SSL and Require Certificates
          • Verify the Following Settings for each SiteMinder Virtual Directory
          • Check the Web Server’s Certificate Expiration
          • Verify Browser Certificate Validity
        • After Certificate Prompt, Authentication Failure Received
          • Verify Correct Policy Server and Web Agent Configuration
        • SiteMinder Policy Should Allow Access, but SSL-Authentication Failed Message Received
        • Error Not Found Message Received
        • Running Certificate or Basic but Cannot Enter Basic credentials.
    • LanMan User Directories
      • About LanMan User Directories
      • LanMan Directory Connection Prerequisites
      • Configure a LanMan Directory Connection
        • Configure Registry Keys for a LanMan Directory Connection
        • Configure a LanMan User Directory Connection
      • Failover for Windows User Directories
      • LanMan User Directory Search Criteria
    • CA SSO/WAC Integration
      • Overview
      • SiteMinder and CA SSO Integration Architectural Examples
        • User Accesses SiteMinder-Protected Resource Before CA SSO
        • Authenticated CA SSO Client User Accesses SiteMinder Resource
        • User Accesses eTrust WAC-Protected Resource Before SiteMinder
      • CA SiteMinder® and CA SSO Integration Prerequisites
      • Configure Single Sign-On from SiteMinder to CA SSO
      • Configure Single Sign-On from CA SSO Client to SiteMinder
      • Configure Single Sign-On from CA SSO to SiteMinder
      • Configure an smetssocookie Web Agent Active Response Attribute
      • Configure an smauthetsso Custom Authentication Scheme
    • CA User Activity Reporting Module Integration
    • Using the Policy Server as a RADIUS Server
      • Use the Policy Server as a Radius Server
      • The RADIUS Client/Server Architecture
      • How RADIUS Authentication Works with the Policy Server
      • Policies in RADIUS Environments
        • RADIUS vs. Non-RADIUS Resources
        • Use Realm Hints
      • Responses in RADIUS Policy Domains
        • How Responses Work
        • Attribute Types
          • User Attributes
          • DN Attributes
          • Active Response Attributes
          • RADIUS Attributes
        • Configure SiteMinder to Always Return RADIUS Attributes
        • Create Attributes for Agent Types
          • Define Multiple Instances of an Attribute
          • Modify Existing Attributes
      • Deploy SiteMinder in a RADIUS Environment
      • Guidelines for Protecting RADIUS Devices
      • How to Authenticate Users in a Homogeneous RADIUS Environment
        • Set Up the User Directory
        • Set Up the Policy Domain
        • Create the Authentication Scheme
      • Authenticate Users in Heterogeneous RADIUS Environments with One User Directory
        • How Users are Authenticated in Heterogeneous, Single Directory Environments
        • System and Policy Domain Configuration
        • Define Agents for a Heterogeneous, Single Directory Environment
        • Configure the User Directory
        • Create the Policy Domain
      • How to Authenticate Users in Heterogeneous RADIUS Environments with Two User Directories
        • How to Configure the System and Policy Domain
        • Define Agents for a Heterogeneous Two Directory Environment
        • Set Up User Directories
        • Create Two Policy Domains
      • RADIUS Agents Group Overview
      • Set Up RADIUS Agent Groups
      • Group RADIUS Responses
      • Troubleshoot and Test RADIUS
        • Generate RADIUS Logs for Accounting and Debugging
        • Read RADIUS Log Files With Smreadclog
        • How to Test using the SiteMinder Test Tool
          • Configure the Policy Server Management Console
          • Test RADIUS Policies
    • Attributes and Expressions Reference
      • Data Types
      • Expression Syntax Overview
      • Pasting
      • Operators
        • Equality Operators
        • Inequality Operators
        • Less-than Operators
        • Greater-than Operators
        • Less-than or Equal-to Operators
        • Greater-than or Equal-to Operators
        • Begins-with Operators
        • Ends-with Operators
        • Containment Operators
        • Set Inclusion Operators
        • Pattern Matching Operator
        • Set Intersection Operators
        • Set Union Operators
        • NOT Operator
        • AND Operator
        • OR Operator
        • Exclusive OR Operator
        • String Concatenation Operator
        • Arithmetic Addition Operator
        • Arithmetic Subtraction Operator
        • Arithmetic Multiplication Operator
        • Arithmetic Division Operator
        • Conditional Operator
        • Indexing Operator
      • Functions Available within Expressions
        • ABOVE Function--Is User Above Specified LDAP DN
        • ABS Function--Find the Absolute Value
        • AFTER Function--Find a String
        • ALL Function--All Bits Set
        • ANDBITS Function--Perform a Bitwise AND Operation
        • ANY Function--Any Bits Set
        • AT Function--Is User at Specified LDAP DN
        • BEFORE Function--Find a String
        • BELOW Function--Is User Below Specified LDAP DN
        • BOOLEAN Function--Convert to "TRUE" or "FALSE"
        • CHAR Function--Convert an ASCII Value
        • CENTER Function--Pad a Source String
        • COMMONDN Function--Find a Common Root
        • COUNT Function--Count the Elements in a Set
        • DATE Function--Set to Midnight (form 1)
        • DATE Function--Convert Year, Month, Day, Hours, Minutes, and Seconds (form 2)
        • DATEFROMSTRING Function--Convert String to Number
        • DATETOSTRING Function--Convert Number to String
        • DAY Function--Return Day of Month
        • DOW Function--Return Day of Week
        • DOY Function--Return Day of Year
        • ENUMERATE Function--Test Set Elements
        • ERROR Function--Write Error Message to Console Log
        • EVALUATE Function--Evaluate an Expression
        • EXISTS Function--Look Up File Name
        • EXPLODEDN Function--Convert LDAP DN to Set
        • FILTER Function--Test Set Elements
        • FIND Function--Return Position in String
        • GET Function--Locate Attributes in a User Directory
        • HEX Function--Convert to Hexadecimal
        • HOUR Function--Convert to Hour
        • HOUR24 Function--Convert to Hour
        • INFO Function--Write INFO Message to Console Log
        • KEY Function--Look Up Key
        • LCASE Function--Convert to Lowercase
        • LEFT Function--Return Part of a String
        • LEN Function--Return the Length of a String
        • LOG Function--Write a String to a File
        • LOOP Function--Call a Virtual Attribute in a Loop
        • LPAD Function--Pad a Source String on the Left
        • LTRIM Function--Remove Leading Spaces in a String
        • MAX Function--Determine the Larger of Two Values
        • MAYBE Function--Report an Indeterminate Result
        • MID Function--Return Part of a String
        • MIN Function--Determine the Lesser of Two Numbers
        • MINUTE Function--Return the Minutes Component for a Date
        • MOD Function--Return Division Remainder
        • MONTH Function--Return the Month Component of a Date
        • NOTBITS Function--Perform a Bitwise NOT
        • NOW Function--Return Current Time in Seconds
        • NOWGMT Function--Return Current Time in Seconds
        • NUMBER Function--Convert to a Numeric Value
        • ORBITS Function--Perform a Bitwise OR Operation
        • PARENTDN Function--Retrieve Parent in LDAP Tree
        • PCASE Function--Convert a String to Proper Case
        • QS Function--Retrieve Items from a Query String
        • RDN Function--Retrieve First Component of LDAP DN
        • RELATIONDN Function--Compare Two Distinguished Names
        • RIGHT Function--Retrieve Characters from a String
        • RPAD Function--Pad a String on the Right
        • RPT Function--Repeat a String
        • RTRIM Function--Remove Trailing Spaces from a String
        • SECOND Function--Return the Number of Seconds in a Date
        • SET Function--Set the Value of an Attribute
        • SIGN Function--Return the Sign of a Number
        • SORT Function--Sort a Set
        • SPACE Function--Return a String of Spaces
        • STRING Function--Convert to a String
        • THROW Function--Stop Processing and Report Custom Error
        • TRACE Function--Write Trace Entry to Console Log
        • TRANSLATE Function--Replace String Value
        • UCASE Function--Convert to Upper Case
        • URL Function--Returns a Component of a URL String
        • URLDECODE Function--Decode a URL String
        • URLENCODE Function--Encode a String
        • VEXIST Function--Is the Parameter Defined?
        • WARNING Function--Write WARNING Message to Console Log
        • XORBITS Function--Perform a Bitwise XOR Operation
        • YEAR Function--Return the Year Component of a Numeric Date
        • YEAR4 Function--Return the Year Component of a Date (4 digits)
  • Policy Server Administration Guide
    • Policy Server Management
      • Policy Server Management Overview
        • Policy Server Components
        • Policy Server Operations
        • Policy Server Administration
      • Policy Server Management Tasks
        • Policy Server Management Console
          • Start the Management Console
          • Save Changes to Management Console Settings
        • Policy Server User Interface
          • Grant Access to XPS Tools
    • Starting and Stopping the Policy Server
      • Services and Processes Overview
      • Start and Stop Policy Server Services on Windows Systems
      • Start and Stop Policy Server Processes on UNIX Systems
      • Thread Exit Window during Policy Server Shutdown
      • Configure the Policy Server Executives
        • Configure Windows Executives
        • Configure the UNIX Executive
    • Configuring Policy Server Data Storage Options
      • Configure Data Storage Options Overview
      • Configure the Policy Store Database
      • Configure the Key Store or Audit Logs to Use the Policy Store Database
      • Configure a Separate Database for the Key Store
      • Configure a Separate Database for the Audit Logs
      • Configure the Session Store
        • Configure the Session Store Timeout for Heavy Load Conditions
      • Configure LDAP Storage Options
        • Configure an LDAP Database
        • Configure LDAP Failover
        • Configure Enhanced LDAP Referral Handling
        • Configure Support for Large LDAP Policy Stores
        • How to Configure SSL Support
          • SSL Prerequisites
          • Create the Certificate Database Files
          • Add the Root Certificate Authority to the Certificate Database
          • Add the Server Certificate to the Certificate Database
          • List the Certificates in the Certificate Database
          • Point the Policy Server to the Certificate Database
      • Configure ODBC Storage Options
        • Configure an ODBC Data Source
        • Configure ODBC Failover
        • Configure Limit to Number of Records Returned by a SQL Query
        • Configure ODBC Registry Settings for Timeout
      • Configure Text File Storage Options
      • Audit Data Import Tool for ODBC
        • Log More Audit Data to a Text File
        • Audit Data Import Prerequisites for ODBC
        • Import Audit Data into an ODBC Database
      • Specify a Netscape Certificate Database File
    • Configuring General Policy Server Settings
      • Policy Server Settings Overview
      • Configure Policy Server Settings
        • Configure Access Control Settings
        • Configure Policy Server Administration Settings
        • Configure Policy Server Connection Options
        • Configure Policy Server Performance Settings
        • Configure RADIUS Settings
        • Configure OneView Monitor Settings
        • Reschedule CA SiteMinder® Policy Data Synchronization
        • How to Set Log Files, and Command-line Help to Another Language
          • Determine the IANA Code for Your Language
          • Environment Variables
            • Set the Locale Variable on Windows Operating Environments
              • Verify the Locale Variable Value on Windows Operating Environments
            • Set the Locale Variable on UNIX or Linux Operating Environments
    • Certificate Data Store Management
      • Certificate Revocation List Updates
        • Change the Default CRL Update Period
      • OCSP Updates
        • Failover Between OCSP and CRL Checking
        • Schedule OCSP Updates
        • Modify the SMocsp.conf file for OCSP Updates
          • SMocsp.conf Settings Used by Federation
        • Disabling OCSP
      • Certificate Cache Refresh Period
      • Default Revocation Grace Period
    • Changing the Policy Server Super User Password
      • Super User Password Overview
      • Change the Policy Server Super User Password
    • Configuring Policy Server Logging
      • Policy Server Logging Overview
      • Configure the Policy Server Logs
        • Record Administrator Changes to Policy Store Objects
        • How to Process Old Log Files Automatically
        • How to Include CA SiteMinder® Administrative Audit Events in Reports
        • Mirror ODBC Audit Log Content in Text-based Audit Logs on Windows
        • Mirror ODBC Audit Log Content in Text-based Audit Logs on Solaris
      • Report Logging Problems to the System Log
      • Configure Certificate Data Store Logging
      • How to Record Events to the Syslog
        • Open the Console
        • Set the Syslog Options
        • Stop a UNIX Policy Server
        • Start a UNIX Policy Server
      • How to Enable Assertion Attribute Logging on Windows Operating Environments
        • Open the Windows Registry Editor
        • Change the Value of the Registry Key
        • Stop a Windows Policy Server
        • Start a Windows Policy Server
      • How to Enable Assertion Attribute Logging on UNIX or Linux Operating Environments
        • Open the sm.registry File with a Text Editor
        • Change the Value of the Line in the Registry File
        • Stop a UNIX Policy Server
        • Start a UNIX Policy Server
    • Configuring and Managing Encryption Keys
      • Policy Server Encryption Keys Overview
      • Key Management Overview
      • FIPS 140-2
      • Agent Keys
      • Dynamic Agent Key Rollover
      • Dynamic Agent Key Rollover
        • Agent Keys Used in Dynamic Key Rollover
        • Rollover Intervals for Agent Keys
      • Static Keys
      • Session Ticket Keys
      • Key Management Scenarios
        • Key Management Considerations
        • Common Policy Store and Key Store
        • Multiple Policy Stores with a Common Key Store
        • Multiple Policy Stores with Separate Key Stores
      • Reset the r6.x Policy Store Encryption Key
      • Reset the r12.x Policy Store Encryption Key
      • Configure Agent Key Generation
      • Manage Agent Keys
        • Configure Periodic Key Rollover
        • Manually Rollover the Key
        • Coordinate Agent Key Management and Session Timeouts
        • Change Static Keys
      • Manage the Session Ticket Key
        • Generate a Session Ticket Key
        • Manually Enter the Session Ticket Key
        • Set the EnableKeyUpdate Registry Key
      • Shared Secret for a Trusted Host
        • Configure Trusted Host Shared Secret Rollover
    • Configuring the Policy Server Profiler
      • Configure the Policy Server Profiler
        • Change Profiler Settings
        • Avoid Profiler Console Output Problems on Windows
        • Configure Profiler Trace File Retention Policy
      • Manually Roll Over the Profiler Trace Log File
        • Dynamic Trace File Rollover at Specified Intervals
    • Configuring Administrative Journal and Event Handler
      • Administrative Journal and Event Handler Overview
      • Configure Advanced Settings for the Policy Server
        • Add Event Handler Libraries
    • Adjusting Global Settings
      • Enable User Tracking
      • Enable Nested Security
      • How to Enable Enhanced Active Directory Integration
        • Create the IgnoreADpwdLastSet registry key
        • Enable Enhanced Active Directory Integration
        • Configure a User Directory Connection
    • Cache Management
      • Cache Management Overview
      • Manage Cache Updates
        • Manage Cache Updates Using the Administrative UI
        • Manage Cache Updates Using the smpolicysrv Command
      • Flush Caches
        • Flush All Caches
        • Flush User Session Caches
        • Flush Resource Caches
        • Flush the Requests Queue on the Policy Server
    • User Session and Account Management
      • User Session and Account Management Prerequisites
      • Enable and Disable Users
      • Manage User Passwords
      • Auditing User Authorizations
    • Configuring SiteMinder Agent to Policy Server Communication Using a Hardware Load Balancer
      • Hardware Load Balancing
      • Configure CA SiteMinder® Agent to Policy Server Connection Lifetime
      • Monitoring the Health of Hardware Load Balancing Configurations
        • Active Monitors
        • Passive Monitors
    • Clustering Policy Servers
      • Clustered Policy Servers
        • Failover Thresholds
        • Hardware Load Balancing Considerations
      • Configure Clusters
      • Configure a Policy Server as a Centralized Monitor for a Cluster
      • Point Clustered Policy Servers to the Centralized Monitor
    • Using the OneView Monitor
      • OneView Monitor Overview
        • Policy Server Data
        • Web Agent Data
        • Configure the OneView Monitor
          • Setting The Data Refresh Rate and Heartbeat
          • Configuring Port Numbers
        • Clustered Environment Monitoring
        • Access the OneView Viewer
          • Protect The OneView Viewer
          • View Monitored Components
          • How to Customize OneView Displays
            • Set Up Tables
            • Configure Alerts
            • Display Tables
            • Sort Tables
            • Configure Data Updates
            • Save Settings
            • Change the Default Display
            • Load Settings
    • Monitoring CA SiteMinder® Using SNMP
      • SNMP Monitoring
        • SNMP Overview
        • CA SiteMinder® SNMP Module Contents
        • Dependencies
        • SNMP Component Architecture and Dataflow
      • CA SiteMinder® MIB
        • MIB Overview
        • SiteMinder MIB Hierarchy
        • MIB Object Reference
          • Authentication Server Data
          • Web Agent Objects in the SiteMinder MIB
        • Event Data
      • Configure the CA SiteMinder® Event Manager
        • Event Configuration File Syntax
        • Event Configuration File Examples
      • Start and Stop SiteMinder SNMP Support
        • Start and Stop the Windows Netegrity SNMP Agent Service
        • Start and Stop SNMP support on UNIX Policy Servers
      • Troubleshooting the SiteMinder SNMP Module
        • SNMP Traps Not Received After Event
    • SiteMinder Reports
      • Report Descriptions
      • Schedule a CA SiteMinder® Report
      • View CA SiteMinder® Reports
      • Delete CA SiteMinder® Reports
    • Policy Server Tools
      • Policy Server Tools Introduced
        • Windows 2008 Policy Server Tools Requirement
        • Requirement When Using the Policy Server Tools on Linux Red Hat
      • Import Policy Data Using smobjimport
      • Overview of the XML-based Data Format
      • XPSExport
        • Add Policy Data
        • Overlay Policy Data
        • Replace Policy Data
        • Merge Policy Data
      • Verify that Federated SAML Partnerships Intended for 12.52 Do Not Have the Same Backchannel Username
      • XPSImport
        • Troubleshooting Policy Data Transfer
      • smkeyexport
      • CA SiteMinder® Key Tool
        • Add a Private Key and Certificate Pair
        • Add a Certificate
        • Add Revocation Information
        • Delete Revocation Information
        • Remove Certificate Data
        • Delete a Certificate
        • Export a Certificate or Private Key
        • Find an Alias
        • Import Default CA Certificates
        • List Metadata for all Certificates
        • List Revocation Information
        • Display Certificate Metadata
        • Rename an Alias
        • Validate a Certificate
        • Load the the OCSP Configuration File
      • smldapsetup
        • Modes for smldapsetup
        • Arguments for smldapsetup
        • smldapsetup and Sun Java System Directory Server Enterprise Edition
        • Remove the SiteMinder Policy Store using smldapsetup
      • Delete SiteMinder Data in ODBC Databases
      • smpatchcheck
      • SiteMinder Test Tool
      • smreg
      • XPSCounter
        • Map the Active Directory inetOrgPerson Attribute
        • Determine the Number of Users Associated with CA SiteMinder® Policies
      • XPSConfig
      • XPSEvaluate
      • XPSExplorer
        • Export a Subset of Policy Store Data
        • XCart Management
          • Export a Subset of Policy Store Data Using XCart
          • Add an Application to an XCart File
      • XPSSecurity
        • Make an Administrator a Super User
      • XPSSweeper
        • Run XPSSweeper as a Batch Job
        • Configure Autosweep to Run Every 24 Hours Using XPSConfig
    • Policy Server Configuration Files
      • CA Compliance Security Manager Configuration File
      • Connection API Configuration File
      • OneView Monitor Configuration File
      • CA SiteMinder® Configuration File
      • SNMP Configuration File
      • SNMP Event Trapping Configuration File
      • Policy Server Registry Keys
    • CA SiteMinder® and CA Security Compliance Manager
      • How CA SiteMinder® and CA Security Compliance Manager Integration Works
      • Generate the Compliance Reports
      • Display List of Available Compliance Reports Or Their Fields
        • Add a New Compliance Report
        • Change the Content of the Existing Compliance Reports
    • General CA SiteMinder® Troubleshooting
      • Resolve LDAP search timeout issues
      • Administrative UI Becomes Unresponsive
      • Resolve MySQL Session Store Timeout Errors
      • Policy Server Exits with LDAP Admin Limit Exceeded Error
      • Command Line Troubleshooting of the Policy Server
        • Start or Stop Debugging Dynamically
        • Start or Stop Tracing Dynamically
      • Policy Server Hangs after Web Agent Communication Failure
      • Check the Installed JDK Version
      • Override the Local Time Setting for the Policy Server Log
      • Review System Application Logs
      • LDAP Referrals Handled by the LDAP SDK Layer
        • Disable LDAP Referrals
        • Handle LDAP Referrals on Bind Operations
      • Idle Timeouts and Stateful Inspection Devices
      • Error -- Optional Feature Not Implemented
      • Errors or Performance Issues When Logging Administrator Activity
      • Policy Servers Sharing Policy Store Not Updated Consistently
      • Cache Failure Timeout
      • Key Rollover Log Messages
      • Cache Update Log Messages
      • Event Handlers List Settings Warning when Opening Policy Server Management Console
      • CA SiteMinder® Policy Server Startup Event Log
      • VLV Indexing on Some LDAP User Directories Causes SiteMinder Agent Group Lookups to Fail (174279)
    • Log File Descriptions
      • smaccesslog4
      • smobjlog4
    • Publishing Diagnostic Information
      • Diagnostic Information Overview
      • Use the Command Line Interface
        • Specify a Location for Published Information
      • Published Data
        • Published Policy Server Information
          • Published Policy Server XML Output Format
        • Published Object Store Information
          • Published Policy/Key Store XML Output Format
        • Published User Directory Information
          • Published User Directory XML Output Format
        • Published Agent Information
          • Published Agent XML Output Format
        • Published Custom Modules Information
          • Published Custom Modules XML Output Format
    • Error Messages
      • Authentication
      • Authorization
      • Server
      • Java API
      • LDAP
      • ODBC
      • Directory Access
      • Tunnel
• Web Agent Guides
  • Web Agent Configuration Guide
    • Web Agents
      • How Web Agents Secure Resources
      • How Web Agents and the Policy Server Work Together
        • Considerations for Web Agents and Policy Servers in Different Time Zones
      • How the Agent Reads CA SiteMinder® Cookies
        • Web Agents and Dynamic Key Rollovers
        • Key Stores
      • Framework and Traditional Agent Architectures
      • Parameters Requiring a Server Restart when Changed
      • Multiple Agent for IIS Directory Structures According to Operating Environment
    • Agent Configuration Methods
      • Central Configuration
        • Implement Central Configuration
      • Local Agent Configuration
        • WebAgent.conf File Locations
        • WebAgent.conf file for Framework Agents
        • LocalConfig.conf File Locations (Framework Agents)
        • Parameters Found Only in Local Configuration Files
        • Implement Local Configuration
          • How to Edit an Agent Configuration File
          • Restrict Changes to Local Configuration Parameters
      • Central and Local Configuration Together
    • Configuration Files used by the Web Agent
      • Agent Connection Manager Configuration File
      • Connection API Configuration File
      • Local Agent Configuration File
      • Trace Configuration File
      • Web Agent Trace Configuration File
      • CA SiteMinder® Host Configuration File
      • Web Agent Configuration File
    • Basic Agent Setup and Policy Server Connections
      • Default Settings of Web Agent Configuration Parameters
      • Set the AgentName and DefaultAgentName Values
      • Restrict Changes to Local Configuration Parameters
      • Ensure that Agent Names Match
      • Encrypt the Agent Name
      • How to Manage Web Agent and Policy Server Communication
      • Accommodate Network Latency
      • Manage Web Agents with Multiple Web Server Instances
        • Set the ServerPath Parameter for Windows Systems
        • Set the ServerPath Parameter for UNIX Systems
        • Additional Configurations Requiring the ServerPath Parameter
      • How to Set Log Files, and Command-line Help to Another Language
        • Determine the IANA Code for Your Language
        • Environment Variables
          • Set the Locale Variable on Windows Operating Environments
            • Verify the Locale Variable Value on Windows Operating Environments
          • Set the Locale Variable on UNIX or Linux Operating Environments
    • Starting and Stopping Web Agents
      • Enable a Web Agent
      • Disable a Web Agent
      • Starting or Stopping Most Apache-based Agents with the apachectl Command
    • User Protection
      • Change How Often an Agent Checks for Policy or Key Updates
      • User Tracking and URL Monitoring
        • Track User Identity Across Anonymous Realms
        • Track User Activities or Application Usage with Auditing
        • URL Monitoring Overview
      • Help Prevent Attacks
        • Protect Web Sites Against Cross-Site Scripting
        • Prevent Cross-Site Scripting Attacks in Web Agent FCC Pages
        • Configure the Web Agent to Check For Cross Site-Scripting
        • Define Valid Target Domains
        • Protect J2EE Applications against Cross-Site Scripting Attacks
        • Override the Default CSS Character Set
        • Specify Bad Query Characters
        • Specify Bad URL Characters
        • Enable Bad Form Characters
        • Help Prevent DNS Denial Of Service Attacks
        • Protect Resources Without Extensions
        • Disable POST Preservation
        • Secure Applications
        • Ensure Custom Responses Comply with X-Frame Options
      • Verify IP Addresses
        • Resolve Agent Identity by IP Address
        • Compare IP Addresses to Prevent Security Breaches
      • SiteMinder Browser Cookies
        • Require Cookies for Basic Authentication
        • Safeguard Information in Cookies with HTTP-Only Attribute
        • Set Secure Cookies
        • Control Identity Cookies
        • Set Persistent Cookies
        • Specify the Cookie Path for Agent Cookies
        • Force the Cookie Domain
        • Implement Cookie Domain Resolution
        • How CookiePathScope Settings Work
        • Configure Support for SDK Third-Party Cookies
      • Define HTTPS Ports
      • Decode Query Data in a URL
      • How to Protect Resources Without Periods or Extensions
      • Handle Complex URIs
    • Use Platform for Privacy Preferences (P3P) Compact Policies with CA SiteMinder® Agents
      • How to Support a P3P Compact Policy with your CA SiteMinder® Web Agent
      • Configure your Web Agent to Accommodate P3P Compact Policies
    • Session Protection
      • Apply CA SiteMinder® Behavior to a Web Application Client
        • Web Application Client Response Introduced
        • Cookie Providers and the Web Application Client Response
        • How to Apply the Web Application Client Response to a Web Application
          • Configure a Web Application Client Response
          • Configure a Customized Response
          • Configure the Web Application to Handle a Custom Response
      • Modify the Session Grace Period
      • Modify the Session Update Period
      • Protect Session Cookies from Misuse with Validation Periods and Expired Cookie URLs
      • Prevent Session Cookie Creation or Updates
      • Prevent Session Cookie Creation or Updates Based on Method and URI
      • Store Session Cookies on the Session Store for Improved Security
      • Validate a Session Cookie Domain
      • Redirect a User after a Session Time-out
      • How to Enforce Timeouts across Multiple Realms
      • Prevent Re-Challenges After Realm Timeouts When Multiple Valid Sessions Exist
      • How to Link a Client Certificate to a CA SiteMinder® Session (Windows)
        • Add the Plug–in
      • How to Link a Client Certificate to a Session (UNIX)
        • Add the Plug–in
        • Enable the SSLOptions directive in the Apache-based Web server
    • Web Application Protection
      • Mechanisms for Developing Web Applications
      • REMOTE_USER Variable
        • Configure the Web Agent to set the REMOTE_USER Variable
        • IIS Web Servers and the REMOTE_USER Variable
      • How Response Attributes Work with Web Agents
        • Use SM_AGENT_ATTR_USRMSG Response for a Forms Challenge
        • Cache Response Attributes
      • CA SiteMinder® Default HTTP Headers
        • HTTP Header and Cookie-Variables
        • Header Variables and End-User IP Address Validation
          • How Custom Headers Validate IP Addresses
          • Configure IP Address Validation
          • IP Address Validation with Previous Web Agent Releases
        • Preserve HTTP Headers
          • Control How HTTP Header Resources are Cached
          • Set the HTTP Header Encoding Spec
          • Disable Conformance to RFC 2047
          • Use Lower Case HTTP in Headers (for Oracle iPlanet, Apache, and Domino web servers)
          • Enable Legacy Variables for HTTP Headers
          • Disable Default HTTP Header Variables
        • Custom Error Handling For Applications
          • How to Set Up Error Handling
          • Notes for Custom 401 Pages
    • Configure Virtual Servers
      • How to Set Up Virtual Server Support
      • Assign Web Agent Identities for Virtual Servers
      • Specify Virtual Servers for the Web Agent to Ignore
    • Forms Authentication
      • How Credential Collectors Process Requests
      • MIME Types for Credential Collectors
      • How to Configure a CA SiteMinder® Agent to Support HTML Forms Authentication
        • Configure Basic FCC Operation
          • Configure a MIME Type Mapping for the FCC on IIS and Domino Web Servers
          • Enable FCCs and SCCs to Use Agent Names as Fully Qualified Host Names
          • Configure the FCC to Use a Single Resource Target
          • Use a Relative Target for Credential Collector Redirects
          • Define Valid Target Domains
          • Define Valid Federation Target Domains
        • Map URLs for FCC Redirects with a Domino Web Agent
        • Configure POST Preservation
          • Enable Post Preservation between Framework and Traditional Agents
          • Customize the POST Preservation Page
          • Disable POST Preservation
        • Configure Advanced FCC Settings
          • Specify Redirect URL Protocols with Lowercase Characters
          • Encrypt Query String Parameters in Redirection URLs
          • FCC Directive for Encoding Query Strings of Redirect URLs
          • How to Configure Application Request Routing (ARR) for HTML Forms Authentication
            • Verify Prerequisites
            • Set the Parameter Values for ARR and FCC
          • How to Configure the FCC to Allow Windows Authentication
            • Risks of Enabling the FCC to Allow Windows Authentication
            • Configure the FCC to Allow Windows Authentication
          • How to Allow the NTC to Encode URLs During Redirects to Protected Resources
            • Open the Administrative UI to Change Policy Server Objects
            • Change the Value of the DisableI18N parameter in your Agent Configuration Object
            • Change the Value of the DisableI18N parameter in your LocalConfig.conf File
        • Tune the Performance of the FCC
          • Disable FCC Realm Context Confirmation to Improve Performance
          • Forms Cache
            • Form Cache Data
            • Configure the Form Cache
      • Specify an NTLM Credential Collector
      • Using Credential Collectors Between 4.x Type and Newer Type Agents
        • Configure Credential Collectors in a Mixed Environment
        • Use FCCs and NTCs in a Mixed Environment
        • Use SCCs in a Mixed Environment
      • Configure Apache-based Agents for FCC-based Password Services in Japanese Environments
    • FCC Internationalization
      • How to Enable FCC Internationalization
        • Enable the Localization Parameter
        • Set Preferred Locales
          • Set Preferred Locale Using a User Agent
            • Use HTTP Header SMCLIENTLOCALE
            • Use HTTP Header Accept-Language
          • Set Preferred Locale using the Administrative UI
            • Set the SMSERVERLOCALE Response Header Variable
            • Set the DefaultLocale ACO Property
          • Set Preferred Locale Using the WebAgent.conf File
        • Define the Configuration Modes Order of Precedence
        • Localize Forms-based Authentication and Basic Password Services Files
          • Customize CA SiteMinder® to Support a New Locale
        • Localize Error Response Files
          • Customize CA SiteMinder® to Support a New Locale
            • Configure the Web Agent
            • Configure the Web Agent ACO
        • Migrate Localized Files
          • Migrate the Forms-based Authentication Files and Basic Password Services Files
          • Migrate the Error Responses Files
    • Agents and Password Services
      • How to Configure FCC Password Services
      • Password Services Implementations
        • FCC Password Services and URL Query Encryption
        • How to Localize FCC-based Password Services Change Forms
        • Use a Fully Qualified URL for Password Services Redirects
        • Configure SecureID Authentication with FCC Password Services
        • How to Enable User-Initiated Password Changes with FCCs
        • How to Enable User-Initiated Password Changes with FCCs (SecureURLs=Yes)
        • How to Enable User-Initiated Password Changes when using the CA SiteMinder® X.509 Certificate and Basic Authentication Scheme
    • Single Sign-On (SSO)
      • Allow Automatic Access to Resources that use the OPTIONS Method
      • How Single Sign-on Works in a Single Domain
      • Single Sign-On Across Multiple Domains
      • Hardware Load Balancers and Single Sign-On Across Multiple Cookie Domains
      • Single Sign-On and Authentication Scheme Protection Levels
      • Single Sign-on and Agent Key Management
      • How to Configure Single Sign-On
        • Restrict Cookie Provider Functions
        • Prevent Cookie Provider Replay Attacks
        • Set RequireCookies Parameter for Single Sign-On
        • Enabling Persistent Cookies for Single Sign-On
        • Specify the Cookie Domain
        • Enable IP Address Validation for Single Sign-On Environments
        • Modify the Session Update Period
        • Set Secure Cookies Across Multiple Domains
        • Ignore the Cookie Provider for Unprotected Resources
        • Ignore the Cookie Provider for POST Requests
        • Configure SecureUrls with Single Sign-on
        • Specify the Cookie Provider
        • Disable Cookie Providers
    • Comprehensive Log Out
      • How Full Logoff Works
      • Configure Full Logoff
      • How to Configure Full Logoff for Single Sign-on
      • Configure Comprehensive Log Out using FCC Forms
    • SSO Security Zones
      • Security Zones Overview
        • Security Zone Definitions
        • Security Zones Benefits
        • Security Zone Basic Use Case
        • User Sessions Across Security Zones
        • Trusted Zone Order
        • The Default Single Sign-On Zone and Trusted Zone List
        • Request Processing with Multiple User Sessions
        • Transitive Relationships Across Zones
        • Other Cookies Affected by Single Sign-On Zones
        • Single Sign-On Zones and Authorization
      • Configure Security Zones
        • Specify the Single Sign-on Zone for the Agent
        • The Order of Trust and Failover
    • Advanced Configuration Settings
      • Agents and Proxy Servers
        • Configure Agents that Sit behind Proxy Servers
        • Customize the Cache-Control and ExpireForProxy Header Settings
        • Proxy Header Usage Notes
        • Security Considerations
      • Agents and Reverse Proxy Servers
        • How Reverse Proxy Servers Work with CA SiteMinder®
        • CA SiteMinder® Secure Proxy Server
          • SM_PROXYREQUEST HTTP Header for CA SiteMinder® Processing with Secure Proxy Server
        • CA SiteMinder® IIS 7.x Web Servers and Application Request Routing (ARR)
          • How to Set up an IIS 7.x Server with ARR and CA SiteMinder® in your DMZ with other CA SiteMinder® Agents for IIS Operating Behind the DMZ
          • Set the CA SiteMinder® Web Agent Configuration Parameters for your IIS 7.x ARR Server in the DMZ
          • Set the Web Agent Configuration Parameters for your IIS 7.x Servers using CA SiteMinder® Behind the DMZ
          • How to Set Up an IIS 7.x Server with ARR and CA SiteMinder® in your DMZ
          • How to Set up your IIS 7.x Servers with CA SiteMinder® When Operating Behind an ARR Server in a DMZ
        • CA SiteMinder® Reverse Proxy Deployment Considerations
          • How to Configure an Apache Reverse Proxy Server
            • Update the Apache Web Server Configuration File
            • Update the Agent Configuration Parameters for a SiteMinder Agent
          • Configure an Oracle iPlanet 7.0 Reverse Proxy Server
      • HTTP Header Settings
        • Remove the Server HTTP Header if Using the URLScan Utility
      • URL Settings
        • Specify Redirect URL Protocols with Lowercase Characters
        • Decode Query Data in a URL
        • Set a Maximum URL Size
      • IIS Web Server Settings
        • Configure Agents for IIS to Obtain User Credentials Without Redirecting to an NTLM Credential Collector (NTC)
        • Record the User Name and Transaction ID in IIS Server Logs
        • Use the NetBIOS Name or UPN for IIS Authentication
        • Configure Agents for IIS to Support NT Challenge/Response Authentication
          • Map the .NTC File Extension
          • Create and Configure the Virtual Directory for Windows Authentication Schemes (IIS 7.5)
          • Configure the Windows Authentication Scheme for Challenge/Response Authentication
          • Specify an NTLM Credential Collector
          • Configure Automatic Logon for Internet Explorer
        • How to Implement an Information Card Authentication Scheme
        • Configure an FCC Template for an Information Card Authentication Scheme
        • Control IIS 7.x Module Execution Order when using the CA SiteMinder® Agent for IIS
        • Use an IIS Proxy User Account (IIS Only)
        • Enable Anonymous User Access
        • Disable Windows Security Context on Agents for IIS
        • Prevent Caching of Server Responses Containing Cookies
        • Determine when the Agent for IIS Sets Cookies
      • Apache Web Server Settings
        • Use the HttpsPorts Parameter on Apache 2.x Servers
        • Use Legacy Applications with an Apache Web Agent
        • Use the HTTP HOST Request for the Port Number
        • Record the Transaction ID in Apache Web Server Logs
        • Choose How Content Types are Transferred in POST Requests
        • Restrict IPC Semaphore-Related Message Output to the Apache Error Log
        • Delete Certificates from Stronghold (Apache Agent Only)
      • Oracle iPlanet Web Server Settings
        • Restrict Directory Browsing on an Oracle iPlanet Web Server
        • Handle Multiple AuthTrans Functions for Oracle iPlanet Web Servers
        • Record the Transaction ID in Oracle iPlanet Web Server Logs
      • Domino Web Server Settings
        • Domino Agents Overview
        • Domino URL Syntax
        • Domino Aliases
        • Configure the Domino Web Agent
        • Configure Domino-Specific Agent Functions
        • Specify User Directories for Domino
        • Guidelines for Creating Policies on Domino Servers
        • Configure Policies for Domino
        • Create Rules for Domino Server Resources
        • Authenticate Users with the Domino Server
        • Authenticate as the Domino Super User
        • Authenticate as the Actual User or the Default User
        • Modify the Domino Default User and the Domino Super User
        • Use Encryptkey to Set the Domino Default or Super User
        • Force CA SiteMinder® to Authenticate Users
        • Use a CA SiteMinder® Header for Authentication
        • Disable Domino Session Authentication
        • Use an Anonymous CA SiteMinder® Authentication Scheme with Domino
        • Enable a Domino Agent to Collect Credentials for Authentication
        • Map URLs for FCC Redirects with a Domino Web Agent
        • Disable URL Normailization
        • Control Access to Lotus Notes Documents
        • Convert Notes Document Names
        • Configure Full Logoff Support for Domino Agents
        • Use a Domino Agent with a WebSphere Application Server
        • Force Domino Server to Authenticate Unprotected CA SiteMinder® Resources
      • Backward Compatibility Settings
        • Accommodate Legacy URL Encoding
        • Choose How Content Types are Transferred in POST Requests
        • Accommodate Testing Tools that do not send HOST Headers
      • Agent Setting for Federation Domains
      • How to Modify the Sample Code to Remove Open Format Cookies When Users Log Out
      • Obtain the Cookie Information
      • Modify the Sample JavaScript Code with the Cookie Information
      • Copy the Modified JavaScript Code to Your Logout Page
    • Performance
      • Set a Time-out for Saved Credentials
      • Web Agent Caches
        • Cache Anonymous Users
        • Set the Maximum Resource Cache Size
        • Set the Maximum User Session Cache Size
        • Control How Long Resource Enteries Remain Cached
        • Disable the Resource Cache
      • Monitoring Web Agents
        • Monitor Web Agents with the OneView Monitor
        • Use CA Wily Introscope to Monitor Web Agents
      • Ignore Unprotected Resources
        • Reduce Overhead by Ignoring File Extensions of Unprotected Resources
        • Specify Virtual Servers for the Web Agent to Ignore
        • Ignore Query Data in a URL
        • Allow Un-restricted Access to URIs
    • Logging and Tracing
      • Logs of Start-up Events
      • Error Logs and Trace Logs
        • Parameter Values Shown in Log Files
        • Set Up and Enable Error Logging
        • Enable Transport Layer Interface (TLI) Logging
        • Limit the Number of Log Files Saved
      • How to Set Up Trace Logging
        • Configure Trace Logging
        • Trace Log Components and Subcomponents
        • Trace Message Data Fields
        • Trace Message Data Field Filters
        • Determine the Content of the Trace Log
        • Limit the Number of Trace Log Files Saved
        • Collect Detailed Agent Connection Data with an Agent Connection Manager Trace Log
    • Troubleshooting
      • Agent Error Codes
      • Agent for IIS Troubleshooting Log
      • Duplicate LLAWP Error Appears in Log File
      • Custom Error Pages not Appearing
      • Unable to initialize tracing error
      • Enable KeepAlives When Agents and Policy Servers are Separated a Firewall
      • Japanese Pages Rendered Improperly (153202, 153609)
      • Non-english Input Characters Contain Junk Characters
    • Agent Error Codes
      • 00-0001
      • 00-0002
      • 00-0004
      • 00-0005
      • 00-0006
      • 00-0007
      • 00-0008
      • 00-0009
      • 00-0010
      • 00-0011
      • 00-0012
      • 00-0013
      • 00-0014
      • 00-0015
      • 00-0016
      • 00-0017
      • 10-0001
      • 10-0002
      • 10-0003
      • 10-0004
      • 10-0005
      • 10-0007
      • 20-0001
      • 20-0002
      • 20-0003
      • 30-0026
    • Agent Parameters
      • List of Agent Configuration Parameters
    • CA SiteMinder® Support Matrix
      • Locate the Platform Support Matrix
  • Web Agent Option Pack Guide
    • Introduction
      • Features Provided by the Web Agent Option Pack
    • Installation Requirements and Considerations
      • General Option Pack Installation Requirements
        • Required Linux Libraries
        • Requirements for Windows System with JBoss (179105)
      • System Locale Must Match the Language of Installation and Configuration Directories (169863)
      • Components Required for CA SiteMinder® Federation
      • Components Required for eTelligent Rules
      • Version Compatibility
      • Environment Variables Added by the Installation
      • Java Virtual Machine Installation Error on Solaris can be Ignored (149886)
      • Web Agent Option Pack on JBOSS Requires Workaround
    • Install the Web Agent Option Pack
      • Installation Modes
      • Run the Web Agent Option Pack Installer
      • Move smvariable.dll file for eTelligent Rules
      • Next Step After Installation
    • Deploy Federation Web Services for Federation
      • Federation Web Services Application Overview
      • Properties File for Federation Web Services
      • Agent Configuration Object Settings Used by FWS
      • Set up the LoggerConfig.properties File
      • Deploy Federation Web Services as a Web Application
        • Set Up ServletExec to Work with Federation Web Services
          • Source the Environment Script on a UNIX Operating Environments
          • Modify the FWS Properties File for a ServletExec Deployment
          • Enable ServletExec to Write to the IIS File System
          • Ensure the IIS Default Web Site Exists
        • Set Up WebLogic to Work with Federation Web Services
          • Source the Environment Script on a UNIX Operating Environments
          • Create an SmHost.conf File
          • Create a WebAgent.conf File
          • Modify the FWS Properties File
          • Configure the WebLogic Reverse Proxy Plug-in
          • Deploy the FWS Application on WebLogic
        • Set Up WebSphere to Work with Federation Web Services
          • Source the Environment Script on a UNIX Operating Environments
          • Create an SmHost.conf File
          • Create a WebAgent.conf File
          • Modify the FWS Properties File
          • Copy Web Agent Option Pack Libraries to WebSphere
          • Deploy a Federation Web Services WAR File in WebSphere
        • Set Up JBOSS or Tomcat to Work with Federation Web Services
          • Source the Environment Script on a UNIX Operating Environments
          • Create an SmHost.conf File
          • Create a WebAgent.conf File
          • Modify the FWS Properties File
          • Prerequisites to Deploy an FWS WAR File in JBoss Server
            • Update the Affwebservices Deployment Descriptor File
            • Create a module.xml File
          • Deploy an FWS WAR File in JBoss or Tomcat
    • Unattended Mode Installation
      • How to Run an Unattended Mode Installation
        • Prepare an Unattended Mode Installation
        • Run an Unattended Mode Installation
        • Stop an Unattended Mode Installation in Progress
    • Uninstall the Web Agent Option Pack
      • Uninstall the Web Agent Option Pack from Windows Systems
      • Uninstall the Web Agent Option Pack from UNIX Systems
    • Upgrade the Web Agent Option Pack
      • Mixed-Version Upgrade Considerations
      • Perform an Option Pack Upgrade
• Federation Guides
  • Federation in Your Enterprise
    • CA SiteMinder® Federation Deployments
      • Federation Deployment Models
      • Federation Specifications
      • Entities in a Federated Network
    • Federation Use Cases and Solutions
      • Use Case: Single Sign-on Based on Account Linking
        • Solution: Single Sign-on based on Account Linking
          • Account Linking Solution: SAML 1.1 HTTP-Artifact Profile
          • Account Linking Solution: SAML 1.x POST Profile
          • Account Linking Solution: SAML 2.0 Artifact Profile
          • Account Linking Solution: SAML 2.0 POST Profile
          • Account Linking Solution: WS-Federation Passive Requestor Profile
      • Use Case: Single Sign-on Based on User Attributes
        • Solution: Single Sign-on based on User Attributes
      • Use Case: Single Sign-on with No Local User Account
        • Solution: Single Sign-on with no Local User Account
      • Use Case: SAML 2.0 Single Logout
        • Solution: SAML 2.0 Single Logout
      • Use Case: WS-Federation Sign-out
        • Solution: WS-Federation Signout
      • Use Case: Identity Provider Discovery Profile
        • Solution: Identity Provider Discovery Profile
      • Use Case: Federation with Multiple SSO Profiles
        • Solution: Federation with Multiple SSO Profiles
      • Use Case: SAML 2.0 User Authorization Based on a User Attribute
        • Solution: SAML 2.0 User Authorization Based on a User Attribute
      • Use Case: Single Sign-on with No Name ID at the IdP
        • Solution 10: Single Sign-on with No Name ID at the IdP
      • Use Case: SSO Using Security Zones
        • Solution: SSO Using Security Zones
      • Use Case: SSO with Dynamic Account Linking at the SP
        • Solution: SSO with Dynamic Account Linking at the SP
        • Configure Dynamic Account Linking at the SP
    • Federation Deployment Considerations
      • Federation Business Case
      • User Identification Across the Partnership
        • User Mapping
        • Account Linking to Establish a Federated Identity
        • Identity Mapping to Establish a Federated Identity
        • User Provisioning to Establish a Federated Identity (partnership federation only)
      • Attributes for Customizing an Application
      • Federation Profile for Single Sign-on
      • Federating with Each CA SiteMinder® Federation Model
        • Partnership Federation Model
        • Legacy Federation Model
        • Federation Flow Diagram
    • Comparing Federation and Web Access Management for Single Sign-on
      • Advantages of Federation and Web Access Management
      • Deployments that Favor Federation
      • Deployments that Favor Web Access Management
    • Federation Web Services
      • Federation Web Services Overview
      • SAML 1.x Artifact and POST Profiles
      • SAML 2.0 Artifact and POST Profiles
      • WS-Federation Passive Requestor Profile
    • Federated Transaction Process Flows
      • SAML 1.x Artifact SSO Transaction Flow (Producer-initiated)
      • SAML 1.x POST SSO Transaction Flow (Producer-initiated)
      • SAML 2.0 Artifact SSO Transaction Flow (SP-initiated)
      • SAML 2.0 POST SSO Transaction Flow (SP-initiated)
      • WS-Federation SSO Transaction Flow (RP-initiated)
      • WS-Federation SSO Transaction Flow (IP-initiated)
      • SAML 2.0 Single Logout Transaction Flow (IdP-initiated)
      • SAML 2.0 Single Logout Transaction Flow (SP-initiated)
      • WS-Federation Sign-out Transaction Flow (IP-initiated)
      • WS-Federation Sign-out Transaction Flow (RP-initiated)
      • Identity Provider Discovery Transaction Flow
  • Legacy Federation Guide
    • Legacy Federation Introduction
      • Terminology for Partners in a Federation
      • Components for Legacy Federation
      • Legacy Federation Authentication Schemes
      • Federated Single Sign-on with Security Zones
      • Secure Proxy Server Federation Gateway
      • Internationalization in Legacy Federation
      • Debugging Features
      • APIs for Legacy Federation
        • Policy Management API
        • Java Message Consumer Plugin API
        • Java Assertion Generator Plugin API
      • Legacy Federation Configuration Flow Chart
    • Deploy Legacy Federation Using the Sample Application
      • Legacy Federation Sample Application Overview
      • Legacy Sample Application Deployment
      • Sample Application Components
      • Prerequisites to Deploy the Sample Application
      • How To Run the Sample Application
        • Set the Path Variable on the Policy Server System
        • Configure a Web Agent in the Administrative UI
        • Modify the FederationSample.conf File
          • FederationSample.conf Settings
        • Modify the SetupFederationSample.pl Script (Optional)
          • SetupFederationSample.pl Script Options (fss)
        • Run the Sample Application on the Policy Server System
          • Using Multiple Policy Servers for the Sample Application
        • Set up the Web Agent System
          • Using Multiple Web Agents for the Sample Application
      • Test Single Sign-on with the Sample Application
      • Test Single Logout with the Sample Application
      • Review Application-Generated SiteMinder Objects
    • Deploy Legacy Federation Using a Manual Configuration
      • Manual CA SiteMinder®-to-CA SiteMinder® Deployment Overview
      • Confirm that Required Components are Installed
      • Sample Federation Network
        • Identity Provider Data for a Basic Configuration
        • Identity Provider Data for an Advanced Configuration
        • Service Provider Data for a Basic Configuration
        • Service Provider Data for an Advanced Configuration
      • Set Up the Identity Provider for the Sample Network
        • Set Up the IdP User Store
        • Point the Policy Server to the IdP LDAP Policy Store
        • Enable Policy Server Trace Logging at the IdP
        • Configure the Web Server with the Web Agent Option Pack
          • Install the JDK for Federation Web Services
          • Install and Configure ServletExec to work with FWS at the IdP
          • Enable ServletExec to Write to the IIS File System
          • Configure the FWS Properties File at the IdP
          • Test Federation Web Services at the IdP
        • Enable Web Agent Option Pack Logging at the IdP
        • Specify the User Store for the IdP Policy Server
        • Set up an Affiliate Domain at the IdP
        • Add the User Directory to the Affiliate Domain at the IdP
        • Add the Service Provider to the Affiliate Domain at the IdP
          • Protect the Authentication URL (SAML 2.0)
        • Select Users for which the IdP Generates Assertions
        • Configure a Name ID for the Assertion
        • Configure POST Single Sign-on at the IdP
        • Disable Signature Processing for the Basic Sample Deployment
        • Complete the Service Provider Object Configuration
        • Configure the Service Provider
      • Set up the Service Provider for the Sample Network
        • Set Up the SP User Store
        • Point the Policy Server to the SP LDAP Policy Store
        • Enable Trace Logging for Federation Components at the SP
        • Configure the Web Server with the Web Agent Option Pack
          • Install the JDK for Federation Web Services
          • Install and Configure ServletExec to Work with FWS at the SP
          • Configure the FWS Properties File
          • Test Federation Web Services
        • Enable Web Agent Option Pack Logging at the SP
        • Specify the User Store for the SP Policy Server
        • Configure the SAML 2.0 Authentication Scheme at the SP
          • Configure HTTP-POST for Single Sign-on at the SP
        • Protect the Target Resource at the SP
      • Test SAML 2.0 Single Sign-on
      • Add Functionality to the Federation Deployment
        • Configure Single Logout
          • Enable Single Logout at the IdP
          • Enable Single Logout at the SP
          • Test Single Logout
        • Configure SAML 2.0 Artifact Single Sign-on
          • Set Up the IdP Session Store for Artifact Single Sign-on
          • Enable SSL for the IdP Web Server for Artifact Single Sign-on
          • Permit Access to FWS Policy for the Artifact Resolution Service
          • Enable a Persistent Session to Store Assertions at the IdP
          • Select the Artifact Binding at the IdP
          • Add a CA Certificate for an SSL Back Channel at the SP
          • Enable the Artifact Binding at the Service Provider
          • Test Artifact Single Sign-on
        • Include an Attribute in the Assertion
        • Configure Digital Signing and Verification
          • Enable Signing at the Identity Provider
          • Enable Signature Validation at the Service Provider
        • Encrypt and Decrypt the Assertion
          • Enable Encryption of the Asserton at the IdP
          • Enable Decryption of the Assertion at the SP
    • Overview of a CA SiteMinder® Federation Setup
      • Federation Setup Overview
      • Conventions in the Installation Overview Procedures
      • Set Up Asserting Party Components
        • Install the Asserting Party Policy Server
        • Set up Affiliate Domains and Add Sites to these Domains
        • Install a Web Agent or SPS Federation Gateway at the Asserting Party
        • Install an Application Server for the Web Agent Option Pack (Asserting Party)
        • Install the Asserting Party Web Agent Option Pack
        • Configure Federation Web Services (Asserting Party)
        • Allow Access to Federation Web Services (asserting party)
        • Enable the Signing of SAML Post Responses
        • Create Links to Target Resources (optional)
          • Initiate SAML 1.x Single Sign-On at the Producer
          • Initiate SAML 2.0 Single Sign-On at the Identity Provider
          • Initiate WS-Federation Single Sign-on at the Account Partner
      • Set Up Relying Party Components
        • Install the Relying Party Policy Server
        • Configure a SAML or WS-Federation Authentication Scheme
        • Protect Target Resources at the Relying Party
        • Install a Web Agent or SPS Federation Gateway (Relying Party)
        • Install a Web or Application Server for the Web Agent Option Pack (Relying Party)
        • Install the Web Agent Option Pack at the Relying Party
        • Configure Federation Web Services at the Relying Party
        • Allow Access to Federation Web Services (asserting party)
        • Modify the Certificate Data Store for Artifact Single Sign-on (optional)
        • Create Links to Initiate Single Sign-on (optional)
          • Initiate SAML 2.0 Single Sign-on at the SP (optional)
          • Initiate WS-Federation Single Sign-on at the Resource Partner
    • Setup the SAML 1.x Assertion Generator File
      • Configure the SAML 1.x Assertion Generator Properties File
      • Review the JVMOptions File Which Creates a JVM
      • The JVMOptions.txt File
    • Storing User Session, Assertion, and Expiry Data
      • Federation Data Stored in the Session Store
      • Enable the Session Store
      • Environments that Require a Shared Session Store
    • Securing a Federated Environment
      • Protecting Federated Communication
        • Setting a One Time Use Condition for an Assertion
        • Securing Connections Across the Federated Environment
        • Protecting Against Cross-Site Scripting
    • Key and Certificate Management
    • User Directory Configuration for Federation
    • Creating Affiliate Domains
      • Affiliate Domain Overview
      • Configure an Affiliate Domain
      • Add Entities to an Affiliate Domain
    • Grant Access to Federation Web Services
      • Policies that Protect Federation Web Services
      • Features Associated with FWS Policies
      • Enforce the Policies that Protect Federation Web Services
    • Configure CA SiteMinder® as a SAML 1.x Producer
      • Prerequisites for a CA SiteMinder® Asserting Partner
      • How To Configure a CA SiteMinder® Producer
        • Optional Configuration Tasks for Identifying an Affiliate
        • Navigating Legacy Federation Dialogs
      • Associate a SAML 1.x Affiliate with an Affiliate Domain
      • Complete the General Settings for the Affiliate
        • Authenticate Users with No CA SiteMinder® Session (SAML 1.x)
          • Configure a Policy to Protect the Authentication URL
        • Configure Time Restrictions for SAML 1.x Consumers (optional)
        • Configure IP Address Restrictions for SAML 1.x Consumers (optional)
      • Select Users for Which Assertions are Generated
        • Exclude a User or Group from Access to a Resource
        • Allow Nested Groups Access to Resources
        • Add Users by Manual Entry
      • Configure a SAML 1.x Assertion
        • A Security Issue Regarding SAML 1.x Assertions
        • Assertion Validity for Single Sign-on
        • Configure an Assertion for One-time Use
      • Grant Access to the Service for Assertion Retrieval (Artifact SSO)
        • Add a Web Agent to the Federation Agent Group
        • Add Relying Partners to the FWS Policy for Obtaining Assertions
        • Verify Basic Protection of the Assertion Retrieval Service
      • Configure the Authentication Scheme that Protects the Artifact Service
        • Basic Authentication to Protect the Service that Retrieves Assertions
        • Basic over SSL to Protect the Service that Retrieves Assertions
        • Client Certificate Auth to Protect the Service that Retrieves Assertion
          • Create the Policy to Protect the Retrieval Service
      • Configure Attributes to Include in SAML 1.x Assertions (Optional)
        • Configure Attributes for SAML 1.x Assertions
        • Specify the Maximum Length of Assertion Attributes
        • Use a Script to Create A New Response Attribute
      • Customize a SAML Assertion Response (optional)
        • Implement the AssertionGeneratorPlugin Interface
        • Deploy the Assertion Generator Plug-in
        • Enable the Assertion Generator Plug-in
      • Creating Links to Consumer Resources for Single Sign-on
        • Choosing Whether to Protect the Intersite Transfer URL
    • Configure CA SiteMinder® as a SAML 1.x Consumer
      • Prerequisites for a CA SiteMinder® Relying Partner
      • How To Configure CA SiteMinder® as a SAML 1.x Consumer
        • Optional Tasks to Configure a CA SiteMinder® Consumer
        • Navigating Legacy Federation Dialogs
      • SAML 1.x Authentication Schemes
        • SAML 1.x Artifact Authentication Scheme Overview
        • SAML 1.x POST Profile Authentication Scheme Overview
      • SAML 1.x Authentication Scheme Prerequisites
        • Install the CA SiteMinder® Policy Server
        • Install Federation Web Services at the Producer and Consumer
        • Set Up a Certificate Data Store to Sign and Verify POST Responses
      • Configure SAML 1.x Artifact Authentication
        • Backchannel Configuration for HTTP-Artifact SSO
      • Configure SAML 1.x POST Profile Authentication
      • Customize Assertion Processing with the Message Consumer Plug-in
        • Implement the MessageConsumerPlugin Interface
        • Deploy a Message Consumer Plug-in
        • Enable the Message Consumer Plug-in for SAML 1.x
      • Redirect Users After Failed SAML 1.x Authentication Atempts
      • Supply SAML Attributes as HTTP Headers
        • Use Case for SAML Attributes As HTTP Headers
        • Configuration Overview to Supply Attributes as HTTP Headers
        • Set the Redirect Mode to Store SAML Attributes
        • Create an Authorization Rule to Validate Users
        • Configure a Response to Send Attributes as HTTP Headers
        • Create a Policy to Implement Attributes as HTTP Headers
      • How To Protect a Resource with a SAML 1.x Authentication Scheme
        • Configure a Unique Realm for Each Authentication Scheme
        • Configure a Single Target Realm for All Authentication Schemes
          • Create Authentication Schemes for the Single Target Realm
          • Create the Custom Authentication Scheme
          • Configure the Single Target Realm
          • Configure the Rule for the Single Target Realm
          • Create a Policy Using the Single Target Realm
    • Configure CA SiteMinder® as a SAML 2.0 Identity Provider
      • Prerequisites for a CA SiteMinder® Asserting Partner
      • How to Configure a CA SiteMinder® Identity Provider
        • Optional Configuration Tasks for Identifying a Service Provider
        • Navigating Legacy Federation Dialogs
      • Add a SAML 2.0 Service Provider to an Affiliate Domain
      • Configure General Information for the Service Provider Object
        • Authenticate Users with No CA SiteMinder® Session
          • Configure a Policy to Protect the Authentication URL
        • Configure Time Restrictions for Service Provider Availability (optional)
        • Configure IP Address Restrictions for Service Providers (optional)
        • Identify a Proxy Server (optional)
      • Select Users for Which Assertions are Generated
        • Exclude a User or Group from Access to a Resource
        • Allow Nested Groups Access to Resources
        • Add Users by Manual Entry
      • Specify a Name ID for a SAML 2.0 Assertion
      • Customize a SAML Assertion Response (optional)
        • Implement the AssertionGeneratorPlugin Interface
        • Deploy the Assertion Generator Plug-in
        • Enable the Assertion Generator Plug-in
        • Customize the Assertion with Attributes from a Web Application
      • Configure Single Sign-on for SAML 2.0
        • Assertion Validity for Single Sign-on
        • Define Indexed Endpoints for Different Single Sign-on Bindings
          • Indexed Endpoints Flow Diagram
          • Configure Indexed Endpoints for the Assertion Consumer Service
        • Enforce the Authentication Scheme Protection Level for SSO
        • Determine Digital Signing Options
        • Enhanced Client or Proxy Profile Overview
          • Configure ECP at the Identity Provider
        • Create a User Identifier by Enabling Allow/Create
        • Ignore the Authentication Context from the SP
        • Configure Assertions for One-time Use
        • HTTP Error Handling at the IdP
        • Customize the Session Duration in the Assertion
      • Grant Access to the Service for Assertion Retrieval (Artifact SSO)
        • Add a Web Agent to the Federation Agent Group
        • Add Relying Partners to the FWS Policy for Obtaining Assertions
      • Configure the Authentication Scheme that Protects the Artifact Service
        • Basic Authentication to Protect the Service that Retrieves Assertions
        • Basic over SSL to Protect the Service that Retrieves Assertions
        • Client Certificate Auth to Protect the Service that Retrieves Assertion
          • Create the Policy to Protect the Retrieval Service
        • WebLogic Configuration Required for Back Channel Authentication
      • Initiate Single Sign-on from the IdP or SP
        • Identity Provider-initiated SSO (POST or artifact binding)
          • Unsolicited Response Query Parameters Used by a SiteMinder IdP
        • Service Provider-initiated SSO (POST or artifact binding)
          • AuthnRequest Query Parameters Used by a SiteMinder SP
          • Query Parameter Processing by a SiteMinder IdP
      • Configure Attributes for Assertions (optional)
        • Specify Attributes for SSO Assertions
          • Use a Script to Create a New Attribute
        • Specify the Maximum Length of Assertion Attributes
        • Attributes for SSO and Attribute Query Requests
      • Configure Single Logout (optional)
        • Single Logout Request Validity
        • Guidelines for the Single Logout Confirmation Page
      • Configure Identity Provider Discovery at the IdP
        • Enable Identity Provider Discovery Profile (optional)
        • Securing the IdP Discovery Target Against Attacks
      • Validate Signed AuthnRequests and SLO Requests/Responses
      • Encrypt a NameID and an Assertion
        • Enabling Encryption
      • Request Processing with a Proxy Server at the IdP
        • Configure Request Processing with a Proxy Server
    • Configure CA SiteMinder® as a SAML 2.0 Service Provider
      • CA SiteMinder® as a Service Provider
        • SAML Authentication Request Process
      • Prerequisites for a CA SiteMinder® Relying Partner
      • How to Configure a SAML 2.0 Authentication Scheme
        • Optional Configuration Tasks for a Service Provider
        • Navigating Legacy Federation Dialogs
      • Select the Authentication Scheme Type
      • Specify the General Information for the SAML 2.0 Auth Scheme
      • Locate User Records for SAML 2.0 Authentication
        • Configure Disambiguation Locally as Part of the Authentication Scheme
          • Obtain the LoginID
          • Configure a User Lookup to Locate a User
        • Use a SAML Affiliation to Locate a User Record (Optional)
      • Configure Single Sign-on at the SP
        • Enforcing a Single Use Policy to Enhance Security
          • How the Single Use Policy is Enforced
          • Configure a Single Use Policy
        • Permit the Creation of a Name Identifier for SSO
          • Include an Allow/Create Attribute in Authentication Requests
        • Configure the Back Channel for HTTP-Artifact SSO
        • ECP Configuration at the Service Provider
      • Enable Single Logout
        • Bindings for Single Logout
        • Configure Single Logout
      • Digital Signing Options at the Service Provider
      • Enforce Assertion Encryption Requirements for Single Sign-on
        • Set Up Encryption for SSO
      • Create a Custom SAML 2.0 Authentication Scheme (optional)
      • IDP Discovery Configuration at the Service Provider
        • Configure Identity Provider Discovery at the SP
        • Securing the IdP Discovery Target Against Attacks
      • Customize Assertion Processing with the Message Consumer Plug-in
        • Implement the MessageConsumerPlugin Interface
        • Deploy a Message Consumer Plug-in
        • Enable the Message Consumer Plug-in for SAML 2.0
      • Supply SAML Attributes as HTTP Headers
        • Use Case for SAML Attributes As HTTP Headers
        • Configuration Overview to Supply Attributes as HTTP Headers
        • Set the Redirect Mode to Store SAML Attributes
        • Create an Authorization Rule to Validate Users
        • Configure a Response to Send Attributes as HTTP Headers
        • Create a Policy to Implement Attributes as HTTP Headers
      • Specify Redirect URLs for Failed SAML 2.0 Authentication
      • Request Processing with a Proxy Server at the SP
        • Configure Request Processing with a Proxy Server at the SP
      • Enable Client Certificate Authentication for the Back Channel (optional)
        • Add a Client Certificate to the Certificate Data Store
        • Configure the Client Certificate Option for the Back Channel
      • How To Protect Resources with a SAML 2.0 Authentication Scheme
        • Configure a Unique Realm for Each Authentication Scheme
        • Configure a Single Target Realm for All Authentication Schemes
          • Create Authentication Schemes for the Single Target Realm
          • Create the Custom Authentication Scheme
          • Configure the Single Target Realm
          • Configure the Rule for the Single Target Realm
          • Create a Policy Using the Single Target Realm
    • Configure CA SiteMinder® as a WS-Federation Account Partner
      • Prerequisites for a CA SiteMinder® Asserting Partner
      • How To Configure a CA SiteMinder® Account Partner
        • Optional Configuration Tasks for a CA SiteMinder® Account Partner
        • Navigating Legacy Federation Dialogs
      • Add a Resource Partner to an Affiliate Domain
      • Configure General Information for the Resource Partner Object
        • Authenticate Users with No CA SiteMinder® Session
          • Configure a Policy to Protect the Authentication URL
        • Assertion Validity for Single Sign-on
        • Configure Time Restrictions for Resource Partner Availability (optional)
        • Configure IP Address Restrictions for Resource Partners (optional)
      • Select Users for Which Assertions are Generated
        • Exclude a User or Group from Access to a Resource
        • Allow Nested Groups Access to Resources
        • Add Users by Manual Entry
      • Configure a Name ID for a WS-Federation Assertion
      • Configure Single Sign-on for WS-Federation
        • Initiate Single Sign-on at the Account Partner
        • Initiate Single Sign-on at the Resource Partner
      • Customize a SAML Assertion Response (optional)
        • Implement the AssertionGeneratorPlugin Interface
        • Deploy the Assertion Generator Plug-in
        • Enable the Assertion Generator Plug-in
        • Customize the Assertion with Attributes from a Web Application
      • Configure Signout for WS-Federation
        • Enable Signout
      • Configure Attributes for WS-Federation Assertions (optional)
        • Configure Assertion Attributes for WS-Federation
        • Specify the Maximum Length of Assertion Attributes
        • Use a Script to Create a New Attribute
    • Configure CA SiteMinder® as a WS-Federation Resource Partner
      • Prerequisites for a CA SiteMinder® Relying Partner
      • How to Configure CA SiteMinder® as a Resource Partner
        • Optional Tasks to Configure a CA SiteMinder® Resource Partner
        • Navigating Legacy Federation Dialogs
      • WS-Federation Authentication Scheme Overview
      • Select the WS-Federation Authentication Scheme Type
      • Specify the General Information for the WS-Fed Auth Scheme
      • Locate User Records for Authentication
        • Obtain a LoginID for a WS-Federation User
        • Use a Search Specification to Locate a WS-Federation User
      • Configure WS-Federation Single Sign-on at the Resource Partner
      • Implement WS-Federation Signout
        • Enable Signout
      • Create a Custom WS-Federation Authentication Scheme
      • Customize Assertion Processing with the Message Consumer Plug-in
        • Implement the MessageConsumerPlugin Interface
        • Deploy a Message Consumer Plug-in
        • Enable the Message Consumer Plug-in for WS-Federation
      • Redirect Users After Failed WS-Federation Authentication Attempts
      • Supply SAML Attributes as HTTP Headers
        • Use Case for SAML Attributes As HTTP Headers
        • Configuration Overview to Supply Attributes as HTTP Headers
        • Set the Redirect Mode to Store SAML Attributes
        • Create an Authorization Rule to Validate Users
        • Configure a Response to Send Attributes as HTTP Headers
        • Create a Policy to Implement Attributes as HTTP Headers
      • How To Protect a Target Resource with a WS-Federation Authentication Scheme
        • Configure a Unique Realm for Each Authentication Scheme
        • Configure a Single Target Realm for All Authentication Schemes
          • Create Authentication Schemes for the Single Target Realm
          • Create the Custom Authentication Scheme
          • Configure the Single Target Realm
          • Configure the Rule for the Single Target Realm
          • Create a Policy Using the Single Target Realm
    • Configure SAML 2.0 Affiliations
      • Affiliation Overview
        • Affiliations for Single Sign-On
        • Affiliations for Single Logout
      • Configure SAML 2.0 Affiliations
        • Assign Affiliations at the Identity Provider
        • Assign Affiliations at the Service Provider
    • Authorize Users with Attributes from an Assertion Query
      • Perform Authorizations with an Attribute Authority
      • Flow Diagram for Authorizing a User with User Attributes
      • How to Configure an Attribute Authority and a SAML Requester
        • Set up the Attribute Authority
        • Configure Attributes at the Attribute Authority
        • Grant Relying Partners Access to the Attribute Authority Service
          • Add a Web Agent to the Federation Agent Group
          • Add Relying Partners to the Policy for the Attribute Authority Service
      • How to Set up a SAML Requester to Generate Attribute Queries
        • Enable Attribute Queries and Specify Attributes
        • Configure the NameID for the Attribute Query
        • Configure the Backchannel for the Attribute Query
        • Create a Federation Attribute Variable
        • Create a Policy Expression with the Federation Attribute Variable
    • Use SAML 2.0 Provider Metadata To Simplify Configuration
      • SiteMinder SAML 2.0 Metadata Tools Overview
      • Export Metadata Tool
        • Run the smfedexport Tool
        • Command Options for smfedexport
        • smfedexport Tool Examples
      • Import Metadata Tool
        • Run the smfedimport Tool
        • smfedimport Tool Examples
        • Command Options for smfedimport
        • Processing Import Files with Multiple SAML 2.0 Providers
        • Processing Import Files with Multiple Certificate Aliases
    • Legacy Federation Trace Logging
      • Trace Logging
      • Flush FWS Cache for Trace Logs
      • Log Messages for the Fed_Client Component
        • Configure FWS Trace Logging
      • Log Messages for the Fed_Server Component
        • Federation Services Trace Logging (smtracedefault.log)
      • Update FWS Data in the Logs
      • Simplify Logging with Trace Configuration Templates
        • Trace Logging Templates for FWS
          • FWS Template Sample(shared)
        • Trace Logging Templates for the IdP and SP
          • Service Provider Template Sample
          • Identity Provider Profiler Sample
    • Configuration Settings that Must Use the Same Values
      • How to Use the Configuration Settings Tables
      • SAML 1.x Matching Configuration Settings
      • SAML 2.0 Matching Configuration Settings
      • WS-Federation Configuration Settings
    • Federation Web Services URLs Used by SiteMinder
      • Federation Services URLs
      • URLs for Services at the Asserting Party
        • Intersite Transfer Service URL (SAML 1.x)
        • Assertion Retrieval Service URL (SAML 1.x)
        • Artifact Resolution Service URL (SAML 2.0)
        • Single Sign On Service URL (SAML 2.0)
        • Single Sign-on Service URL (WS-Federation)
        • Single Logout Service URL at the IdP (SAML 2.0)
        • Signout Service URL at the AP (WS-Federation)
        • Identity Provider Discovery Profile Service URL (SAML 2.0)
        • Attribute Service URL (SAML 2.0)
        • WSFedDispatcher Service URL at the AP
      • URLs for Services at the Relying Party
        • SAML Credential Collector Service URL (SAML 1.x)
        • AuthnRequest Service (SAML 2.0)
        • Assertion Consumer Service URL (SAML 2.0)
        • Security Token Consumer Service URL (WS-Federation)
        • Single Logout Service URL at the SP (SAML 2.0)
        • Signout Service URL at the RP (WS-Federation)
        • WSFedDispatcher Service URL at the RP
      • The Web.xml File
    • Troubleshooting
      • Transaction IDs to Aid Federation Troubleshooting
      • General Issues
        • Web Agent Option Pack Fails to Initialize Due to Invalid smjavaagent.dll
        • Cookie Domain Mismatch Errors
        • Error After Successful Authentication at Consumer/SP
        • HTTP 404 Error When Trying to Retrieve Assertion at the Consumer
        • Federation Web Services Fails to Send SAML Request to Producer/IdP
        • Matching Parameter Case-Sensitivity Configuration Issues
        • Policy Server System Fails After Logoff
        • Multibyte Characters in Assertions are Not Handled Properly
        • Trace Logs Not Appearing for IIS Web Server Using ServletExec
        • Error During Initialization of JVM
      • SAML 1.x-Only Issues
        • SAML 1.x Artifact Profile Single Sign-On Failing
        • Failed Authentication for Access to Assertion Retrieval Service
        • Authentication Fails After Modifying Authentication Method
        • Client Authentication Fails for SAML Artifact Single Sign-on
      • SAML 2.0-Only Issues
        • Failed Authentication to Access the Assertion Retrieval Service
        • ODBC Errors Deleting Expiry Data From Session Store
    • Creating a Legacy Federation Configuration in the Partnership Model
  • Partnership Federation Guide
    • Partnership Federation Introduction
      • Overview
      • Programmerless Federation
      • Intended Audience
      • Terminology Used in this Guide
      • Navigating the Partnership Federation Dialogs
    • Prerequisites for Partnership Federation
      • Prerequisites for a CA SiteMinder® Asserting Partner
      • Prerequisites for a CA SiteMinder® Relying Partner
    • Getting Started with a Simple Partnership
      • Basic SAML 2.0 Partnership
      • Sample Federation Network
      • Confirm that Required Components are Installed
      • Configure the IdP Partner
        • Establish a User Directory Connection at the IdP
        • Configure the Partnership Entities
        • Create the IdP-to-SP Partnership
        • Specify Federation Users for Assertion Generation
        • Add a Name ID to the Assertion
        • Set Up Single Sign-on at the IdP
        • Disable Signature Processing
        • Confirm the IdP-to-SP Partnership Settings
      • Configure the SP Partner
        • Establish a User Directory Connection at the SP
        • Identify the Partnership Entities
        • Create the SP-to-IdP Partnership
        • Specify the User Identification Attribute
        • Configure Single Sign-on at the SP
        • Disable Signature Processing
        • Specify the Target at the SP
        • Confirm the SP Partner Settings
      • Activate the Partnership
      • Test the Partnership (POST Profile)
        • Create a Web Page to Initiate Single Sign-on
        • Create a Target Resource
        • Test POST Single Sign-on
      • Enable Signature Processing
        • Configure Signature Processing at the IdP
        • Configure Signature Processing at the SP
      • Add Single Logout
        • Configure Single Logout at the IdP
        • Configure Single Logout at the SP
        • Test Single Logout
      • Set Up the Artifact Profile for SSO
        • Configure Artifact SSO at the IdP
        • Configure Artifact SSO at the SP
        • Specify the Target at the SP
      • Test the Partnership (Artifact SSO)
        • Create a Web page to Initiate Single Sign-on (Artifact)
        • Create a Target Resource
        • Test Artifact Single Sign-on
      • Configuration Procedures Beyond the Simple Partnership
    • Storing User Session, Assertion, and Expiry Data
      • Federation Data Stored in the Session Store
      • Enable the Session Store
      • Environments that Require a Shared Session Store
    • User Directory Connections for Partnership Federation
    • Federation Entity Configuration
      • Methods to Create an Entity
      • How to Create an Entity without Using Metadata
        • Entity Type Choice
        • Detailed Local Entity Configuration
        • Detailed Remote Entity Configuration
        • Confirm the Entity Configuration
        • Entity Configuration Changes from a Partnership
      • How to Create an Entity by Importing Metadata
        • Metadata File Selection
        • Select an Entity to Import
        • Certificate Imports
        • Confirm the Entity Configuration
    • Partnership Creation and Activation
      • Partnership Creation
      • Partnership Definition
      • Partnership Identification and Configuration
        • Editing Entities from the Partnership
      • Partnership Confirmation
      • Partnership Activation
      • Exporting a Partnership
    • Federated User Identification for a Partnership
      • Federation Users Configuration at the Asserting Party
      • User Identification at the Relying Party
        • Configure User Identification at the Relying Party
        • Employ AllowCreate for User Identification (SAML 2.0)
    • Assertion Configuration at the Asserting Party
      • Assertion Configuration
      • Configure Assertion Options
      • Assertion Attribute Configuration Examples
      • How To Add Session Attributes to an Assertion
        • Determine which Session Attributes are Available
        • Add Session Attributes to the Assertion Configuration
          • Session Attribute Examples in the Administrative UI
        • Confirm the Authentication Mode and URL for SSO
        • Configure an Authentication Scheme to Persist Session Attributes
        • Create a Policy to Protect the Authentication URL
          • Create a Realm and a Rule for the Authentication URL Policy
          • Complete the Authentication URL Policy
      • How to Configure Claims Transformation at the Asserting Party
        • Prerequisites for Claims Transformation
        • Learn the Attribute Expression Guidelines
        • Configure Claims Transformation at the Asserting Party
          • Transform a Claim in an Assertion
          • Add a Claim to an Assertion
          • Delete a Claim from an Assertion
      • Customize Assertion Content
        • Implement the AssertionGeneratorPlugin Interface
        • Deploy an Assertion Generator Plug-in
        • Enable the Assertion Generator Plug-in
    • Single Sign-on Configuration
      • Single Sign-on Configuration (Asserting Party)
        • Authentication Mode for Partnership Federation
        • Legacy Artifact Protection Type for the HTTP-Artifact Back Channel
      • Single Sign-on Configuration (Relying Party)
      • Status Redirects for HTTP Errors (SAML 2.0 IdP)
      • Single Sign-on Initiation (SAML 2.0)
      • Assertion Validity for Single Sign-on
      • Session Validity at a Service Provider
      • Back Channel Authentication for Artifact SSO
        • Configure the HTTP-Artifact Back Channel
      • How to Enable SAML 2.0 Attribute Query Support
        • Configure the Partnership for Attribute Query Support
        • Configure the SAML 2.0 Attribute Authority
      • How to Retrieve User Attribute Values from a Third-Party Source
        • Proxied Attribute Query Overview
        • Enable the System to Serve as an Attribute Authority (IdP->SP)
        • Enable the System to Serve as an Attribute Requester (SP->IdP)
      • User Consent at a SAML 2.0 IdP
        • Customize a User Consent Form
      • Enhanced Client or Proxy Profile Overview (SAML 2.0)
        • Configure ECP at the Identity Provider
        • Configure ECP at the Service Provider
      • IDP Discovery Profile (SAML 2.0)
        • IDP Discovery Configuration at the Identity Provider
        • IDP Discovery Configuration at the Service Provider
      • Single Sign-on to Office 365
        • Verify the Prerequisites for SSO to Office 365
        • Configure a WS-Federation Partnership with Office 365
          • Define a Local IP Entity for an Office 365 Partnership
          • Define a Remote RP Entity for an Office 365 Partnership
          • Configure a WS-Federation Partnership with Office 365
          • Configure a Trust Relationship between Office 365 and STS (SOAP-based SSO)
        • Configure CA SiteMinder® SPS
          • Verify the STS Setup Requirements
          • Configure the JVM to Use the JSafeJCE Security Provider
          • Deploy STS
        • Test and Troubleshoot SSO to Office 365 (Active Requestor Profile)
      • How to Configure SAML 2.0 HTTP POST Binding
        • Enable the HTTP POST Binding at the IdP
        • Enable the HTTP POST Binding at the SP
      • Configure the SAML 2.0 Name ID Management Profile
        • Protect the Name Identifier Management Administration Web Service URL
        • Configure a Remote Entity for Name ID Management
        • Create a Local Entity
        • Configure a Partnership for Name ID Management
        • Activate the Partnership
        • Enable Name ID Management Requests
        • Create a Client Application to Interact with the Name Identifier Web Service
      • Configure a SAML2 Response for Authentication Failure
        • Define a Response Specifying the Negative Authentication Response Attribute
        • Configure a Basic or Forms Authentication Scheme
        • Configure a Rule for Authentication Event Actions
        • Map the Rule Using the OnAuthReject Actiton to the Appropriate Response
        • Configure an IdP-to-SP Partnership to Support Negative Authentication Response
    • Configure Social Sign-on
      • Authenticate Users Using an OAuth Authorization Server
        • Verify the Prerequisites
        • Create a Local OAuth Client Entity
        • Create or Modify the Remote Entity of an Authorization Server
        • Create a Partnership to Configure Single Sign-On
        • Migrate an OAuth Authentication Scheme Set-up to OAuth Partnership
      • Configure a Credential Selector Page
        • Configure Single Sign-On Between the Federation System and an Identity Provider
        • Create an Authentication Method Group
        • Configure a Partnership Between the Federation System and Enterprise
        • Customize the Header and Footer on the Credential Selector Page
    • Assertion Processing Customization (Relying Party)
      • Customize Assertion Processing (Relying Party)
        • Implement the MessageConsumerPlugin Interface
        • Deploy a Message Consumer Plug-in
        • Enable the Message Consumer Plug-in in the UI
    • Delegated Authentication
      • Delegated Authentication Overview
      • How the Third Party WAM Passes the User Identity
        • Cookie Method for Passing User Identity
        • Query String Method for Passing User Identity
      • Delegated Authentication Configuration
        • Cookie Delegated Authentication Sample Setup
        • Query String Delegated Authentication Sample Setup
        • Third-party WAM Configuration for Cookie Delegated Authentication
        • Third-party WAM Configuration for Query String Delegated Authentication
    • URLs to Initiate Single Sign-on
      • Links to Servlets which Initiate Single Sign-on
      • Producer-initiated SSO (SAML 1.1)
      • IdP-initiated SSO (SAML 2.0 Artifact or POST)
        • Unsolicited Response Query Parameters Used by the IdP
        • ForceAuthn and IsPassive Processing at the IdP
      • SP-initiated SSO (SAML 2.0)
        • AuthnRequest Query Parameters Used by an SP
      • IP-initiated Single Sign-on (WSFED)
      • RP-initiated Single Sign-on (WSFED)
    • Logging Out of User Sessions
      • Single Logout Overview (SAML 2.0)
        • Managing Single Logout Across a Network Using HTTP-Redirect and SOAP
        • Understanding Skew Time for SLO Request Validity
        • Configure Single Logout
        • Back Channel Configuration for Single Logout
      • Sign-Out Overview (WS-Federation)
        • Enable WSFED Sign-Out
      • Local Logout at the SP (SAML 2.0)
    • Authentication Context Processing (SAML 2.0)
      • Determine how a User Authenticated at an Identity Provider
        • Authentication Context Processing for IdP-initiated SSO
        • Authentication Context Processing for SP-Initiated SSO
      • Determine Authentication Context and Strength Levels with your Partner
      • Configure an Authentication Context Template
        • Set up an Authentication Context Template
        • Protection Level Assignments for a Context Template
      • Configure Authentication Context Processing at the IdP
        • Specify How the IdP Obtains the Authentication Context
      • Configure Authentication Context Requests at the SP
        • Enable Authentication Context Requests at the SP
    • Sign and Encrypt Federation Messages
      • Key and Certificate Management
      • Signature Configuration at a SAML 1.1 Producer and WSFED IP
      • Signature Verification at a SAML 1.1 Consumer and a WSFED RP
      • Signature Configuration at a SAML 2.0 IdP
      • Encryption Configuration at a SAML 2.0 IdP
      • Signature Configuration at a SAML 2.0 SP
      • Encryption Configuration at a SAML 2.0 SP
    • Secure a Federated Environment
      • Methods to Secure Federated Transactions
      • Enforcing the One Time Use of an Assertion
      • Securing Connections Across the Federated Environment
      • Protecting a Federated Network Against Cross-Site Scripting
    • Application Integration at the Relying Party
      • Relying Party Interaction with Applications
      • Redirecting a User to the Target Application
      • Using HTTP Headers to Pass Assertion Data (SAML only)
        • Configure HTTP Headers to Pass Assertion Data (SAML only)
      • Mapping Assertion Attributes to Application Attributes (SAML only)
        • Using the Application Attributes Definitions Table
        • Modify and Delete Mappings
        • Construct Attribute Mapping Rules Using the Proper Syntax
        • Configure Attribute Mapping at the Relying Party
      • User Provisioning at the Relying Party
        • Remote Provisioning
        • Delivery of Assertion Data to the Provisioning Application
        • Remote Provisioning Configuration
      • Failed Authentication Handling Using Redirect URLs (Relying Party)
    • Export Metadata to Aid Partnership Configuration
      • Metadata Export Overview
      • Entity-level Metadata Export
      • Partnership-Level Metadata Export
      • How To Enable WS-Federation Metadata Exchange
        • Metadata Exchange Transaction Flow
        • Give the Metadata Exchange URL to Your Partner
        • Enable WSFED Metadata Exchange
    • Log Files that Aid Troubleshooting
      • Federation Trace Logging
      • Transaction IDs to Aid Federation Troubleshooting
        • How To Follow a Single Transaction in a Log
      • Federation Services Trace Logging (smtracedefault.log)
      • Federation Web Services Trace Logging (FWSTrace.log)
        • FWS Template Sample(shared)
    • Open Format Cookie Details
      • Contents of the Open Format Cookie
    • Encryption and Decryption Algorithms
      • Open Format Cookie Encryption Algorithms
      • Digital Signing and Private Key Algorithms
      • Back Channel Communication Algorithms
      • Java SDK Encryption Algorithms
      • Crypto Algorithm
• Web Services Security Guides
  • CA SiteMinder® Web Services Security Upgrade Guide
    • Upgrade Guide
    • Legal Notices
    • CA Technologies Product References
    • Contact CA Technologies
    • Documentation Changes
    • Planning Migration and Upgrades
      • SiteMinder Documentation
      • Component Versions in this Guide
      • Policy Server and Policy Store Versions in this Guide
      • Upgrade Paths
        • Migration
        • Parallel Upgrade
      • How to Plan a Migration
        • Review the Policy Server Release Notes
        • Analyze Your CA SiteMinder® Web Services Security Environment
        • Plan a Recovery Strategy
        • Determine the Upgrade Path
        • Mixed Environments
          • Use Mixed-Mode Support
          • SOA Security Manager r12.1 SP3 Mixed Mode Support
          • Limitations of an r12.1 SP3 Mixed Environment
      • How to Plan a Parallel Upgrade
      • How to Upgrade Simple Test Environments
      • Common CA SOA Security Manager Environments
        • Single Policy Store, Multiple Policy Servers and SOA Agents
        • Clustered Environment
        • Shared User Directory Environment
    • Upgrading from CA SOA Security Manager r12.1 SP3
      • Supported Upgrade Paths
      • Migration Considerations
        • Administrative UI Upgrade Options
        • Administrative UI Protection with SiteMinder
        • Certificate Data Management
        • Avoid Policy Store Corruption
      • How the r12.1 SP3 Migration Works
      • How to Migrate from r12.1 SP3
        • Synchronize Key Database Instances
        • Upgrade an r12.1 SP3 Policy Server
          • Before You Upgrade
          • Required Linux Libraries
          • Korn Shell (ksh) Package Required on Linux
          • Upgrade a Policy Server on Windows
          • Upgrade a Policy Server Using a GUI on UNIX
          • Upgrade a Policy Server on UNIX Using a Console
          • Custom Server–Side Code Requirements
          • Troubleshoot a Policy Server Upgrade
        • Upgrade an r12.1 SP3 SOA Agent
          • How to Prepare for a SOA Agent Upgrade
            • Verify the Policy Server is Configured
            • Identify the Required Administrator and Policy Server Object Names
            • Identify WSS Agent Requirements
            • Replace Existing Read-only Files
          • Upgrade an r12.1 SP3 SOA Agent
        • How to Upgrade an r12.1 SP3 Policy Store
          • Stop all Policy Severs
          • Import the Policy Store Data Definitions
          • Import the Default Policy Store Objects
          • Run the XPS Sweeper Utility
          • Start all Policy Servers
        • How to Upgrade an r12.1 SP3 Administrative UI
          • Before You Upgrade
          • Required Linux Libraries
          • Upgrade the Administrative UI on Windows
          • Upgrade the Administrative UI on UNIX
          • Upgrade the Administrative UI on UNIX Using a Console
      • How a Parallel Upgrade Works
      • How to Configure a Parallel Environment
        • Parallel Environment Key Management Options
          • Common Key Store Deployment
          • Multiple Key Store Deployment
        • Create the 12.52 Environment
        • Common Key Store Single Sign–on Requirements
        • How to Separate a Key Store from a Policy Store
          • Disable Dynamic Agent Key Generation
          • Export the Agent Keys
          • Import the Agent Keys
          • Configure all Policy Servers to use the Key Store
          • Re–enable Dynamic Agent Key Generation
        • Multiple Key Store Single Sign–on Requirements
        • Migrate Keys and Certificates
        • Migrate the Assertion Issuer ID
        • Migrate the r12.1 SP3 Policies
        • User Directory Single Sign on Requirements
    • Using FIPS-Compliant Algorithms
      • FIPS 140-2 Migration Overview
      • FIPS 140-2 Migration Requirements
      • Migration Roadmap—Re-Encrypt Sensitive Data
      • How to Re-Encrypt Existing Sensitive Data
        • Gather Environment Information
        • Set a Policy Server to FIPS-Migration Mode
        • Re-encrypt a Policy Store Key
        • Re-Encrypt the Policy Store Administrator Password
        • Re-encrypt the CA SiteMinder® Super User Password
        • Set an Agent to FIPS-Migration Mode
        • Re-encrypt Client Shared Secrets
          • Use the Administrative UI to Re-encrypt a Shared Secret
          • Use smreghost to Re-encrypt a Shared Secret
        • Re-encrypt Policy and Key Store Data
          • Options for Re-encrypting Policy and Key Store Data
          • Re-encrypt Keys Stored in the Policy or Key Store
          • Re-encrypt the Policy Store Data
        • Verify that Password Blobs are Re-encrypted
      • Migration Roadmap—Configure FIPS-Only Mode
      • How to Configure FIPS-only Mode
        • Set an Agent to FIPS-only Mode
        • Set the Policy Server to FIPS-only Mode
        • How to Re–Register an Administrative UI Configured for Internal Authentication
          • Stop the Application Server
          • Delete the Administrative UI Data Directory
          • Reset the Administrative UI Registration Window
          • Start the Application Server
          • Register the Administrative UI
        • How to Re–Register an Administrative UI Configured for External Authentication
          • Delete an Administrative UI Connection to the Policy Server
          • Run the Registration Tool
          • Gather Registration Information
          • Configure the Connection to the Policy Server
          • Delete the Previous Trusted Host
        • How to Re-Register the Report Server Connection
          • Create a Client Name and Passphrase
          • Gather Registration Information
          • Register the Report Server with the Policy Server
    • Upgrade and FIPS Worksheets
      • Active Directory Information Worksheet
      • CA Directory Information Worksheet
      • Oracle Directory Server Information Worksheet
      • Microsoft ADAM Information Worksheet
      • Administrative UI Registration Worksheet
      • FIPS Information Worksheet
    • Troubleshoot a SiteMinder Key Database Migration
      • Status of CA SiteMinder® Key Database Migration Unknown
      • Certificate Data Store Error Appears
      • Migration Failed Error Appears
      • Migrate a CA SiteMinder® Key Database Manually
    • Platform Support and Installation Media
      • Locate the Platform Support Matrix
      • Locate the Bookshelf
      • Locate the Installation Media
  • CA SiteMinder® Web Services Security Policy Configuration Guide
    • CA SiteMinder® Web Services Security Policy Configuration Guide
    • Legal Notices
    • CA Technologies Product References
    • Contact CA Technologies
    • Introducing CA SiteMinder® Web Services Security
      • CA SiteMinder® Web Services Security Overview
        • CA SiteMinder® Web Services Security Architecture and Components
          • CA SiteMinder® Policy Server
          • Web Services Security (WSS) Agents
            • SiteMinder WSS Agent for Web Servers
            • SiteMinder WSS Agent for IBM WebSphere
            • SiteMinder WSS Agent for Oracle WebLogic
            • SiteMinder Agent for JBoss
        • Web Service Request Processing
        • Authentication Schemes
      • Authentication Service Models
        • How the Single-Step Authentication Model Works
        • How the Multistep Authentication Model Works
        • How the Chain Authentication Service Model Works
        • Multistep and Chain Authentication Using SiteMinder Session Tickets
      • How to Develop and Deploy CA SiteMinder® Web Services Security Protected Web Services
    • Configure Authentication Schemes to Verify User Identities Obtained from Web Service Requests
      • Authentication Scheme Overview
      • How to Configure XML DCC Authentication to Verify User Identities Using Credentials Gathered from XML Request Messages
        • Configure the XML DCC Authentication Scheme
        • How to Configure XML DCC Field Mappings
          • Configure the Required "user" Mapping
          • (Optional) Configure Other Field Mappings
        • XML DCC XPath Mapping Examples
          • Example Namespace-aware XPath Query
          • Example XPath Query to Obtain Credentials From Embedded XML Documents
          • Example XPath Query to Obtain Credentials with a Default Namespace for all Elements
          • Example XPath Query that Explicitly Specifies the Namespace Prefix
          • Example XPath Query With Namespace and Element-by-Element Navigation
      • How to Configure XML DSIG Authentication to Verify User Identities Associated with X.509 Certificates
        • Verify Required XML Document Elements for XML-DSIG Authentication
        • Configure the XML DSIG Authentication Scheme
        • Configure a Certificate Mapping
      • WS-Security Authentication
        • XML Encryption
          • How CA SiteMinder® Web Services Security Obtains Credentials from Encrypted WS-Security Documents
          • Configure CA SiteMinder® Web Services Security to Perform Encryption and Decryption of WS-Security Documents
          • XML Encryption and Decryption Service Use Case
          • Encryption Algorithms
        • Message Timestamps
        • XML Signature Scope
        • SOAP Actor/Role Attributes in Messages with Multiple WS-Security Headers
        • Username and Password Digest Token Age Restrictions
        • How to Configure WS-Security Authentication to Verify User Identities Obtained from WS-Security Headers
          • Verify That Certificates Required to Validate Signed Tokens are Present in the Certificate Data Store
          • Configure the WS-Security Authentication Scheme
          • (Optional) Strip Standard Prefixes from XPath Queries That Identify WS-Security SAML Assertion Attributes
      • How to Configure SAML Session Ticket Authentication to Verify User Identities Obtained from SAML Session Ticket Assertions
        • Review Information About How Multiple SAML Session Ticket Assertions are Processed
        • Configure a SAML Session Ticket Authentication Scheme
    • (Optional) Configure Responses to Generate SAML Session Tickets or WS-Security Headers for Outgoing Messages
      • Responses Overview
        • Response Attribute Types
        • Web Agent Response Attributes
        • Responses and Directory Mappings
        • WS-Security Header Production Overview
          • How WS-Security Responses are Used
          • How WS-Security Headers Are Produced
          • WS-Security Token Types
            • Username and Password Digest Token
            • Username and Password Token (Clear Text)
            • X509v3 Certificate Token
            • WS-Security SAML Assertion Token
        • How SAML Session Ticket Responses are Used
      • How to Configure Responses to Produce WS-Security Headers
        • Verify Certificate Requirements
        • Review Supported Authentication Schemes for Producing Different WS-Security Header Types
        • Configure CA SiteMinder® Web Services Security to Generate SAML Assertions
          • SAML 1.x Assertion Generator
            • Configure the AMAssertionGenerator.properties File
            • Configure Affiliate Domains and Affiliate Objects
          • Configure SAML 2.0 Service Providers
        • Configure a Response to Produce WS-Security Headers
          • (Mandatory) Response Attribute Variable for Specifying the Generated WS-Security Token Type
          • Response Attribute Variables for Generating Username and Password and X.509 Certificate Tokens
          • Response Attribute Variables for Generating SAML Tokens
          • Response Attribute Variables for Encrypting/Decrypting WS-Security Messages
          • Response Attribute Variables for Handling WS-Security Headers
            • TXM_WSSEC_MUST_UNDERSTAND Response Variable Effect Detail
        • WS-Security Response Examples
          • Example 1
          • Example 2
          • Example 3
          • Example 4
          • Example 5
      • How to Configure Responses to Produce SAML Session Tickets
        • Verify Certificate Requirements
        • Configure a Response to Produce a SAML Session Ticket
          • SAML Session Ticket Response Attribute Variables
        • SAML Session Ticket Response Examples
    • How to Define the Security Policy for One or More Related Web Services from a WSDL File
      • Verify Your Administrative Rights
      • Create an Application Object for the Web Services That You Want to Protect
      • (Optional) Configure Responses to Associate With Web Service Resources
      • Generate the Security Policy from the Web Service Definition Contained in a WSDL File
      • Modify the Default Role Created By the Wizard to Define User Access Rights
      • Create Additional Roles to Define User Access Rights
      • Modify Role Assignments in the Security Policy
    • Configure Security Policies Using Domain-based Policy Management
      • Domain-based Policy Management Overview
      • How to Identify a Web Service Resource by Agent, Realm, and Rule
        • How a SiteMinder WSS Agent for Web Servers Identifies Web Service Resources
        • How Other SiteMinder WSS Agent Types Identify Web Service Resources
        • Resource Identification Policy Examples
        • Unprotected Realms, Rules, and Policies
      • Guided Example: Create Security Policies from a WSDL File
    • Variables
      • eTelligent Rules
        • CA SiteMinder® eTelligent Rules Benefits
        • eTelligent Rules Configuration
          • eTelligent Rules Properties Files
          • JVMOptions.txt File
          • Modify the LoggerConfig.properties File
      • Variables Overview
        • Variable Types
          • Static Variables
          • Request Context Variables
          • User Context Variables
          • Form Post Variables
        • Variable Use in Policies
        • Message-based Authorization Using Variables
        • Variable Use in Responses
      • Create a Variable
        • Create a SAML Assertion Variable
        • Create a Transport Variable
        • Create an XML Agent Variable
        • Create an XML Body Variable
        • Create an XML Envelope Header Variable
        • Create a Static Variable
        • Create a Request Context Variable
        • Create a User Context Variable
        • Create a Form Post Variable
      • Configure Message-based Authorization Using an XPath Query in XmlToolkit.properties
  • CA SiteMinder® Web Services Security Agent Guide for Apache-based Web Servers
    • CA SiteMinder® Web Services Security Agent for Web Servers Introduction
      • Overview
      • SiteMinder WSS Agent Functions
      • The SiteMinder WSS Agent and the Policy Server
      • SiteMinder WSS Agent Support for Web Servers
      • Custom SiteMinder WSS Agent
    • Preparation
      • Only Apache-based Web Server Procedures in this Guide
      • Hardware Requirements for CA SiteMinder® Agents
      • How to Prepare for SiteMinder WSS Agent Installation on Apache-based Servers
        • Locate the Platform Support Matrix
        • Apache-based server Preparations for Windows operating environments
          • Install an Apache Web Server on Windows as a Service for All Users
          • Verify Presence of a Logs Subdirectory with Permissions for Apache-based Web Agents
        • Apache-based server Preparations on UNIX operating environments
          • Set the DISPLAY For CA SiteMinder® Agent Installations on UNIX
          • Verify Presence of a Logs Subdirectory with Permissions for Apache-based CA SiteMinder® Agents
          • Required Solaris Patches
          • AIX Requirements
        • Apache-based server Preparations for Linux operating environments
          • Required Linux Patches
          • Required Linux Libraries
          • Linux Tools Required
          • Compile an Apache Web Server on a Linux System
          • Verify Presence of a Logs Subdirectory with Permissions for Apache-based CA SiteMinder® Agents
        • How to Prepare for Agent Installation and Configuration on z/OS Systems
          • Locate the Platform Support Matrix
          • Locate the Installation Media
          • Add a Supported JRE to the System Path
          • Set the DISPLAY Variable for CA SiteMinder® Agent Installations on z/OS
          • Verify Presence of a Logs Subdirectory with Permissions for Apache-based CA SiteMinder® Agents
        • IBM HTTP server Preparations for all Supported Operating Environments
          • Enable Write Permissions for IBM HTTP Server Logs
        • Policy Server Requirements
        • Review the CA SiteMinder® Web Services Security Release Notes for Known Issues
    • Install and Configure Apache-based Agents on Windows
      • Agent Installation Compared to Agent Configuration
      • Set the JRE in the Path Variable
      • Apply the Unlimited Cryptography Patch to the JRE
      • Configure the JVM to Use the JSafeJCE Security Provider
      • How to Install and Configure a SiteMinder WSS Agent for Apache on a Windows System
        • Gather the Information for the Installation Program
        • Gather Information Required for SiteMinder WSS Agent Configuration
        • Run the Installer to Install a SiteMinder WSS Agent
        • Run the SiteMinder WSS Agent Configuration Program on Windows
        • Run the Unattended or Silent Installation and Configuration Programs Subsequent SiteMinder WSS Agents on Windows
    • Install and Configure Apache-based Agents on UNIX/Linux
      • Agent Installation Compared to Agent Configuration
      • Set the JRE in the PATH Variable
      • Apply the Unlimited Cryptography Patch to the JRE
      • Configure the JVM to Use the JSafeJCE Security Provider
      • How to Install SiteMinder WSS Agents for Web Servers on UNIX or Linux Systems
        • Gather the Information for the Installation
        • Run the Installer to Install a SiteMinder WSS Agent Using a UNIX Console
        • Run the Installer to Install a SiteMinder WSS Agent Using a GUI
      • How to Install SiteMinder WSS Agents on z/OS Systems
        • Gather the Information for the Installation
        • Run the SiteMinder WSS Agent Installation Program on z/OS
      • How to Configure SiteMinder WSS Agents on UNIX/Linux
        • Gather Information Required for SiteMinder WSS Agent Configuration
        • Set Environment Variables for a SiteMinder WSS Agent on UNIX
        • Run the SiteMinder WSS Agent Configuration Program on UNIX or Linux Systems
        • Run the Unattended or Silent Installation and Configuration Programs for your SiteMinder WSS Agent
        • Set the LD_PRELOAD Variable
        • Set the LD_ASSUME_KERNEL for Apache Agent on SuSE Linux 9 for zSeries
        • Set the CAPKIHOME Variable for Red Hat Linux 6 Systems
      • How to Configure SiteMinder WSS Agents on z/OS Systems
        • Gather Information Required for SiteMinder WSS Agent Configuration
        • Set the Library Path Variable on z/OS
        • Run the SiteMinder WSS Agent Configuration Program on z/OS
        • (Optional) Run the Unattended or Silent Installation and Configuration Programs for SiteMinder WSS Agents on z/OS
      • Optional Agent Settings for UNIX/Linux
        • Set SiteMinder WSS Agent Variables when using apachectl Script
        • Improve Server Performance with Optional httpd.conf File Changes
    • Upgrade a SOA Agent to a 12.52 WSS Agent
      • How to Upgrade a SOA Agent
        • Verify That the LD_PRELOAD Variable Does Not Conflict with Existing Agent
        • Run the Installation Wizard to Upgrade Your Agent on Windows
        • Run the Installation Wizard to Upgrade your Agent on UNIX/Linux
        • Set the Library Path Variable Before Configuring your Upgraded Agent on UNIX/Linux
        • Run the Configuration Wizard on Your Upgraded SiteMinder WSS Agent on Windows
        • Run the Configuration Wizard on Your Upgraded SiteMinder WSS Agent on UNIX/Linux
    • Advanced Configuration
      • SiteMinder WSS Agent Configuration Parameters
      • Configure a SiteMinder WSS Agent to Enable Fine-Grain Resource Identification
      • Configure the Username and Password Digest Token Age Restriction
      • Configure the SiteMinder WSS Agent to Process Large XML Messages
      • Apache Web Server Settings
        • Use the HttpsPorts Parameter on Apache 2.x Servers
        • Use Legacy Applications with an Apache Web Agent
        • Use the HTTP HOST Request for the Port Number
        • Record the Transaction ID in Apache Web Server Logs
        • Choose How Content Types are Transferred in POST Requests
        • Restrict IPC Semaphore-Related Message Output to the Apache Error Log
        • Delete Certificates from Stronghold (Apache Agent Only)
    • Dynamic Policy Server Clusters
      • Connect a SiteMinder WSS Agent to a Dynamic Policy Server Cluster
    • Starting and Stopping SiteMinder WSS Agents
      • Enable a SiteMinder WSS Agent
      • Disable a SiteMinder WSS Agent
      • Starting or Stopping Most Apache-based Agents with the apachectl Command
      • Start and Stop SiteMinder WSS Agent Processing
        • Start the CA SiteMinder® Web Services Security XML SDK Server
        • Stop the CA SiteMinder® Web Services Security XML SDK Server
    • Operating System Tuning
      • Tune the Shared Memory Segments
      • How to Tune the Solaris 10 Resource Controls
    • Uninstall a SiteMinder WSS Agent
      • Set JRE in PATH Variable Before Uninstalling the CA SiteMinder® Agent
      • Uninstall a SiteMinder WSS Agent
    • SiteMinder WSS Agent Logging
      • Logs of Start-up Events
      • Error Logs and Trace Logs
        • Parameter Values Shown in Log Files
        • Set Up and Enable Error Logging
        • Enable Transport Layer Interface (TLI) Logging
        • Limit the Number of Log Files Saved
      • How to Set Up Trace Logging
        • Configure Trace Logging
        • Trace Log Components and Subcomponents
        • Trace Message Data Fields
        • Trace Message Data Field Filters
        • Determine the Content of the Trace Log
        • Limit the Number of Trace Log Files Saved
        • Collect Detailed Agent Connection Data with an Agent Connection Manager Trace Log
      • Configure XML Message Processing Logging
      • Disable SiteMinder WSS Agent XML Message Processing Logging
      • How to Set Log Files, and Command-line Help to Another Language
        • Determine the IANA Code for Your Language
        • Environment Variables
          • Set the Locale Variable on Windows Operating Environments
            • Verify the Locale Variable Value on Windows Operating Environments
          • Set the Locale Variable on UNIX or Linux Operating Environments
    • Troubleshooting
      • Apache Server Shows shmget Failure On Startup
      • Apache Agent is Enabled but Default Server Page or Protected Resource Not Accessible
      • Apache Web Agent Not Operating
      • Incorrect Error Code Returned Returned on XML-DCC Authentication Failure
    • Worksheets
      • Agent Installation Worksheet
      • Agent Configuration Worksheet
  • CA SiteMinder® Web Services Security Agent Guide for IIS Web Servers
    • CA SiteMinder® Web Services Security Agent for Web Servers Introduction
      • Overview
      • SiteMinder WSS Agent Functions
      • The SiteMinder WSS Agent and the Policy Server
      • SiteMinder WSS Agent Support for Web Servers
    • Preparation
      • Only IIS Web Server Procedures in this Guide
      • Hardware Requirements for CA SiteMinder® Agents
      • Multiple Agent for IIS Directory Structures According to Operating Environment
      • How to Prepare for a WSS Agent for IIS Installation on Your Web Server
        • Set the JRE in the Path Variable
        • Verify that you have an Account with Administrative Privileges on the Windows Computer Hosting your IIS Web Server
        • Verify that the IIS Role, and the Related Role Services are Installed
        • Locate the Platform Support Matrix
        • Verify that the Windows Operating Environment for your IIS Web Server has the Proper Service Packs and Updates Installed
        • Verify that the Microsoft Visual C++ 2005 Redistributable Package (x64) is Installed
        • Review the Policy Server Prerequisites for Agent for IIS Installations
        • Review the CA SiteMinder® Web Services Security Release Notes for Known Issues
    • Install an Agent for IIS on Windows Operating Environments
      • Agent Installation Compared to Agent Configuration
      • Apply the Unlimited Cryptography Patch to the JRE
      • Configure the JVM to Use the JSafeJCE Security Provider
      • Agent for IIS Installation and Configuration Roadmap
      • How to Install and Configure a SiteMinder WSS Agent for IIS
        • IIS 7.x Web Server Shared Configuration and the CA SiteMinder® Agent for IIS
          • How SiteMinder WSS Agent Logs and Trace Logs Work with IIS 7.x Web Server Shared Configuration
        • Gather the Information for the Agent Installation Program for the Windows Operating Environment
        • Gather the Information for the SiteMinder WSS Agent Configuration Program for IIS Web Servers
        • Run the Installer to Install a SiteMinder WSS Agent
        • Run the WSS Agent Configuration Wizard
        • Run the Unattended or Silent Installation and Configuration Programs for your Agent for IIS
          • Add CA SiteMinder® Web Services Security Protection to Additional Virtual Sites on IIS Web Servers Silently
          • Remove a SiteMinder WSS Agent Configuration from an IIS Web Server Silently
          • Remove CA SiteMinder® Web Services Security Protection From Some Virtual Sites on IIS Web Servers Silently
      • How to Configure Certain Settings for the SiteMinder WSS Agent for IIS Manually
        • Set Permissions Manually for Non-Default Log Locations
        • Change IIS Settings Manually for CA SiteMinder® Web Services Security Authentication Schemes Requiring Certificates
    • Upgrade a SOA Agent to a 12.52 WSS Agent
      • How to Upgrade a SOA Agent
        • Run the Installation Wizard to Upgrade your Agent for Web Servers
        • Run the Configuration Wizard on your Upgraded SiteMinder WSS Agent
    • Advanced Configuration
      • SiteMinder WSS Agent Configuration Parameters
      • Configure a SiteMinder WSS Agent to Enable Fine-Grain Resource Identification
      • Configure the Username and Password Digest Token Age Restriction
      • Configure the SiteMinder WSS Agent to Process Large XML Messages
    • Dynamic Policy Server Clusters
      • Connect a SiteMinder WSS Agent to a Dynamic Policy Server Cluster
    • Starting and Stopping SiteMinder WSS Agents
      • Enable a SiteMinder WSS Agent
      • Disable a SiteMinder WSS Agent
      • Start and Stop SiteMinder WSS Agent Processing
        • Start the CA SiteMinder® Web Services Security XML SDK Server
        • Stop the CA SiteMinder® Web Services Security XML SDK Server
    • Uninstall a SiteMinder WSS Agent
      • Set JRE in PATH Variable Before Uninstalling the CA SiteMinder® Agent
      • Uninstall a SiteMinder WSS Agent
    • SiteMinder WSS Agent Logging
      • Logs of Start-up Events
      • Error Logs and Trace Logs
        • Parameter Values Shown in Log Files
        • Set Up and Enable Error Logging
        • Enable Transport Layer Interface (TLI) Logging
        • Limit the Number of Log Files Saved
      • How to Set Up Trace Logging
        • Configure Trace Logging
        • Trace Log Components and Subcomponents
        • Trace Message Data Fields
        • Trace Message Data Field Filters
        • Determine the Content of the Trace Log
        • Limit the Number of Trace Log Files Saved
        • Collect Detailed Agent Connection Data with an Agent Connection Manager Trace Log
      • Configure XML Message Processing Logging
      • Disable SiteMinder WSS Agent XML Message Processing Logging
      • How to Set Log Files, and Command-line Help to Another Language
        • Determine the IANA Code for Your Language
        • Environment Variables
          • Set the Locale Variable on Windows Operating Environments
            • Verify the Locale Variable Value on Windows Operating Environments
          • Set the Locale Variable on UNIX or Linux Operating Environments
    • Troubleshooting
      • I need to execute another IIS 7.x Module Before the CA SiteMinder® Web Agent for IIS
      • Changing Document Root Folder after Agent Configuration Leaves Resources Unprotected
      • Diagnose Agent Start-Up/Shutdown Issues (Framework Agents Only)
      • Incorrect Error Code Returned Returned on XML-DCC Authentication Failure
    • Worksheets
      • Web Agent Install Worksheet for the Windows Operating Environment
      • CA SiteMinder® Agent Configuration Worksheet for IIS Web Servers
  • CA SiteMinder® Web Services Security Agent Guide for iPlanet Web Servers
    • CA SiteMinder® Web Services Security Agent for Web Servers Introduction
      • Overview
      • SiteMinder WSS Agent Functions
      • The SiteMinder WSS Agent and the Policy Server
      • SiteMinder WSS Agent Support for Web Servers
    • Preparation
      • Only iPlanet Web Server Procedures in this Guide
      • Hardware Requirements for CA SiteMinder® Agents
      • How to Prepare for SiteMinder WSS Agent Installation on an Oracle iPlanet Web Server
        • Locate the Platform Support Matrix
        • Oracle iPlanet Web Server Preparations for Windows
          • Verify that the Microsoft Visual C++ 2005 Redistributable Package (x64) is Installed
        • Oracle iPlanet Web Server Preparations for UNIX
          • Set the DISPLAY For CA SiteMinder® Agent Installations on UNIX
          • Required Solaris Patches
          • AIX Requirements
        • Oracle iPlanet Web Server Preparations for Linux
          • Required Linux Patches
          • Required Linux Libraries
        • Policy Server Requirements
        • Review the CA SiteMinder® Web Services Security Release Notes for Known Issues
    • Install and Configure SiteMinder WSS Agents for iPlanet on Windows
      • Agent Installation Compared to Agent Configuration
      • Set the JRE in the Path Variable
      • Apply the Unlimited Cryptography Patch to the JRE
      • Configure the JVM to Use the JSafeJCE Security Provider
      • How to Install and Configure a SiteMinder WSS Agent for iPlanet on a Windows System
        • Gather the Information for the Installation Program
        • Gather Information Required for SiteMinder WSS Agent Configuration
        • Run the Installer to Install a SiteMinder WSS Agent
        • Run the SiteMinder WSS Agent Configuration Program on Windows
        • Run the Unattended or Silent Installation and Configuration Programs Subsequent SiteMinder WSS Agents on Windows
        • Apply CA SiteMinder® Changes to Oracle iPlanet Configuration Files with Oracle iPlanet Administration Server Console for SunOne 6.1 Servers
        • Manually Configure Non-Default Server Instances, Virtual Servers, or Reverse Proxies for Oracle iPlanet Web Servers
        • Improve Server Performance with Optional httpd.conf File Changes
    • Install and Configure SiteMinder WSS Agents for iPlanet on UNIX/Linux
      • Agent Installation Compared to Agent Configuration
      • Set the JRE in the PATH Variable
      • Apply the Unlimited Cryptography Patch to the JRE
      • Configure the JVM to Use the JSafeJCE Security Provider
      • How to Install SiteMinder WSS Agents for Web Servers on UNIX or Linux Systems
        • Gather the Information for the Installation
        • Gather Information Required for SiteMinder WSS Agent Configuration
        • Run the Installer to Install a SiteMinder WSS Agent Using a UNIX Console
        • Run the Installer to Install a SiteMinder WSS Agent Using a GUI
      • How to Configure SiteMinder WSS Agents on UNIX/Linux
        • Set Environment Variables for a SiteMinder WSS Agent on UNIX
        • Run the SiteMinder WSS Agent Configuration Program on UNIX or Linux Systems
        • Run the Unattended or Silent Installation and Configuration Programs for your SiteMinder WSS Agent
        • Apply CA SiteMinder® Changes to Oracle iPlanet Configuration Files with Oracle iPlanet Administration Server Console for SunOne 6.1 Servers
        • Manually Configure Non-Default Server Instances, Virtual Servers, or Reverse Proxies for Oracle iPlanet Web Servers
        • Modify the Oracle iPlanet Startup Script to Prevent Crashes when the Server Stops
    • Upgrade a SOA Agent to a 12.52 WSS Agent
      • How to Upgrade a SOA Agent
        • Verify That the LD_PRELOAD Variable Does Not Conflict with Existing Agent
        • Run the Installation Wizard to Upgrade Your Agent on Windows
        • Run the Installation Wizard to Upgrade your Agent on UNIX/Linux
        • Set Environment Variables for a SiteMinder WSS Agent on UNIX
        • Run the Configuration Wizard on Your Upgraded SiteMinder WSS Agent on Windows
        • Run the Configuration Wizard on Your Upgraded SiteMinder WSS Agent on UNIX/Linux
        • Apply Changes to your Upgraded CA SiteMinder® Files with the iPlanet Administration Console
        • Manually Configure Non-Default Server Instances, Virtual Servers, or Reverse Proxies for Oracle iPlanet Web Servers
    • Advanced Configuration
      • SiteMinder WSS Agent Configuration Parameters
      • Configure a SiteMinder WSS Agent to Enable Fine-Grain Resource Identification
      • Configure the Username and Password Digest Token Age Restriction
      • Configure the SiteMinder WSS Agent to Process Large XML Messages
      • Oracle iPlanet Web Server Settings
        • Restrict Directory Browsing on an Oracle iPlanet Web Server
        • Handle Multiple AuthTrans Functions for Oracle iPlanet Web Servers
        • Record the Transaction ID in Oracle iPlanet Web Server Logs
    • Dynamic Policy Server Clusters
      • Connect a SiteMinder WSS Agent to a Dynamic Policy Server Cluster
    • Starting and Stopping SiteMinder WSS Agents
      • Enable a SiteMinder WSS Agent
      • Disable a SiteMinder WSS Agent
      • Starting or Stopping Most Apache-based Agents with the apachectl Command
      • Start and Stop SiteMinder WSS Agent Processing
        • Start the CA SiteMinder® Web Services Security XML SDK Server
        • Stop the CA SiteMinder® Web Services Security XML SDK Server
    • Operating System Tuning
      • Tune the Shared Memory Segments
      • How to Tune the Solaris 10 Resource Controls
    • Uninstall a SiteMinder WSS Agent
      • Set JRE in PATH Variable Before Uninstalling the CA SiteMinder® Agent
      • Uninstall a SiteMinder WSS Agent
    • SiteMinder WSS Agent Logging
      • Logs of Start-up Events
      • Error Logs and Trace Logs
        • Parameter Values Shown in Log Files
        • Set Up and Enable Error Logging
        • Enable Transport Layer Interface (TLI) Logging
        • Limit the Number of Log Files Saved
      • How to Set Up Trace Logging
        • Configure Trace Logging
        • Trace Log Components and Subcomponents
        • Trace Message Data Fields
        • Trace Message Data Field Filters
        • Determine the Content of the Trace Log
        • Limit the Number of Trace Log Files Saved
        • Collect Detailed Agent Connection Data with an Agent Connection Manager Trace Log
      • Configure XML Message Processing Logging
      • Disable SiteMinder WSS Agent XML Message Processing Logging
      • How to Set Log Files, and Command-line Help to Another Language
        • Determine the IANA Code for Your Language
        • Environment Variables
          • Set the Locale Variable on Windows Operating Environments
            • Verify the Locale Variable Value on Windows Operating Environments
          • Set the Locale Variable on UNIX or Linux Operating Environments
    • Troubleshooting
      • Incorrect Error Code Returned Returned on XML-DCC Authentication Failure
      • Web Server Starts but Web Agent Not Enabled
      • smget Error Message When Web Server Starts
      • Reconfigured Web Agent Won't Operate
      • Oracle iPlanet Web Server Fails at Runtime
    • Worksheets
      • Agent Installation Worksheet
      • Agent Configuration Worksheet
  • CA SiteMinder® Web Services Security Agent for Oracle WebLogic Guide
    • WSS Agent for Oracle WebLogic Guide
    • Legal Notices
    • CA Technologies Product References
    • Contact CA Technologies
    • SiteMinder WSS Agent for Oracle WebLogic Introduction
      • SiteMinder WSS Agent for Oracle WebLogic Overview
      • Required Background Information
      • SiteMinder WSS Agent for Oracle WebLogic Components
        • SiteMinder WSS Agent JAX-RPC Handler
        • SiteMinder WSS Agent Login Module
      • Installation Location References
    • SiteMinder WSS Agent for WebLogic Install Preparation
      • Locate the Platform Support Matrix
      • Software Requirements
      • Installation Checklist
      • Preconfigure Policy Objects for SiteMinder WSS Agents
        • Policy Object Preconfiguration Overview
        • Preconfiguring the Policy Objects
    • Install the SiteMinder WSS Agent for WebLogic on a Windows System
      • Set the JRE in the Path Variable
      • Apply the Unlimited Cryptography Patch to the JRE
      • Configure the JVM to Use the JSafeJCE Security Provider
      • Run the Installer to Install a SiteMinder WSS Agent
      • Install a SiteMinder WSS Agent Using the Unattended Installer
      • Installation and Configuration Log Files
      • How to Configure Agents and Register a System as a Trusted Host
        • Gather Information Required for SiteMinder WSS Agent Configuration
        • Configure a SiteMinder WSS Agent and Register a Trusted Host
          • Configure an Agent and Register Your System as a Trusted Host on Windows
            • Modify the SmHost.conf File (Windows)
          • Re-register a Trusted Host Using the Registration Tool (Windows)
          • Register Multiple Trusted Hosts on One System (Windows)
      • Uninstall the SiteMinder WSS Agent
    • Install the SiteMinder WSS Agent for WebLogic on a UNIX System
      • Set the JRE in the PATH Variable
      • Apply the Unlimited Cryptography Patch to the JRE
      • Configure the JVM to Use the JSafeJCE Security Provider
      • Run the Installer to Install a SiteMinder WSS Agent Using a GUI
      • Run the Installer to Install a SiteMinder WSS Agent Using a UNIX Console
      • Install a SiteMinder WSS Agent Using the Unattended Installer
      • Installation and Configuration Log Files
      • How to Configure Agents and Register a System as a Trusted Host
        • Gather Information Required for SiteMinder WSS Agent Configuration
        • Configure a SiteMinder WSS Agent and Register a Trusted Host
          • Run the SiteMinder WSS Agent Configuration Program on UNIX or Linux Systems
            • Installation and Configuration Log Files
            • Modify the SmHost.conf File
          • Re-register a Trusted Host Using the Registration Tool (UNIX)
      • Uninstall the SiteMinder WSS Agent
    • Upgrade a SOA Agent to a 12.52 WSS Agent
      • How to Upgrade a SOA Agent
        • Verify That the LD_PRELOAD Variable Does Not Conflict with Existing Agent
        • Run the Installation Wizard to Upgrade Your Agent on Windows
        • Run the Installation Wizard to Upgrade your Agent on UNIX/Linux
        • Set the Library Path Variable Before Configuring your Upgraded Agent on UNIX/Linux
        • Run the Configuration Wizard on Your Upgraded SiteMinder WSS Agent on Windows
        • Run the Configuration Wizard on Your Upgraded SiteMinder WSS Agent on UNIX/Linux
    • Configure the SiteMinder WSS Agent
      • How to Configure the SiteMinder WSS Agent
      • SiteMinder WSS Agent for WebLogic Agent Configuration File
      • Agent Configuration Object
      • SiteMinder WSS Agent Configuration Parameters
      • Configure the Username and Password Digest Token Age Restriction
    • Set the WebLogic Environment for the SiteMinder WSS Agent
      • WebLogic Environment Setting Locations
      • Set the WebLogic Environment on Windows
      • Set the WebLogic Environment on UNIX
    • SiteMinder WSS Agent for Oracle WebLogic Logging
      • SiteMinder WSS Agent Logging
      • Log Files
        • SiteMinder WSS Agent Log
        • SiteMinder WSS Agent XML Message Processing Logging
      • Change the SiteMinder WSS Agent Log File Name
      • Append Messages to an Existing SiteMinder WSS Agent Log File
      • Set the SiteMinder WSS Agent File Log Level
      • Roll Over the SiteMinder WSS Agent Log File
      • Disable SiteMinder WSS Agent XML Message Processing Logging
      • SiteMinder WSS Agent Log Configuration File Summary
      • How to Set Log Files, and Command-line Help to Another Language
        • Determine the IANA Code for Your Language
        • Environment Variables
          • Set the Locale Variable on Windows Operating Environments
            • Verify the Locale Variable Value on Windows Operating Environments
          • Set the Locale Variable on UNIX or Linux Operating Environments
    • Final Steps
      • Prevent WebLogic 10 from Loading Incompatible Version of XML Security
      • Restart WebLogic
      • Configure Web Services to Invoke the SiteMinder WSS Agent JAX-RPC Handler
        • Manually Edit JAX-RPC Web Service Deployment Descriptors
        • Use Handler Chains
          • Use a Handler Chain to Invoke the SiteMinder WSS Agent for HTTP Requests
          • Use a Handler Chain to Invoke the SiteMinder WSS Agent for JMS Requests
      • Configure Policies for the SiteMinder WSS Agent
      • Troubleshoot Issues Related to Protected Web Services Making Use of Apache Commons Logging and Log4j
        • Commons Logging Classl Loading Problem
        • log4j Conflict Problems
  • CA SiteMinder® Web Services Security Agent for IBM WebSphere Guide
    • WSS Agent for IBM WebSphere Guide
    • Legal Notices
    • CA Technologies Product References
    • Contact CA Technologies
    • SiteMinder WSS Agent for IBM WebSphere Introduction
      • SiteMinder WSS Agent for IBM WebSphere Overview
      • Required Background Information
      • SiteMinder WSS Agent for IBM WebSphere Components
        • SiteMinder WSS Agent JAX-RPC Handler
        • SiteMinder WSS Agent Login Module
      • Recommended Reading List
      • Installation Location References
    • SiteMinder WSS Agent for IBM WebSphere Install Preparation
      • Locate the Platform Support Matrix
      • Software Requirements
      • Installation Checklist
      • Preconfigure Policy Objects for SiteMinder WSS Agents
        • Policy Object Preconfiguration Overview
        • Preconfiguring the Policy Objects
    • Install the SiteMinder WSS Agent for WebSphere on a Windows System
      • Set the JRE in the Path Variable
      • Apply the Unlimited Cryptography Patch to the JRE for SiteMinder WSS Agents
      • Configure the JVM to Use the JSafeJCE Security Provider
      • Run the Installer to Install a SiteMinder WSS Agent
      • Install a SiteMinder WSS Agent Using the Unattended Installer
      • Copy cryptojFIPS.jar to the WebSphere JRE
      • Installation and Configuration Log Files
      • How to Configure Agents and Register a System as a Trusted Host
        • Gather Information Required for SiteMinder WSS Agent Configuration
        • Configure a SiteMinder WSS Agent and Register a Trusted Host
          • Configure an Agent and Register Your System as a Trusted Host on Windows
            • Modify the SmHost.conf File (Windows)
          • Re-register a Trusted Host Using the Registration Tool (Windows)
          • Register Multiple Trusted Hosts on One System (Windows)
      • Uninstall the SiteMinder WSS Agent
    • Install the SiteMinder WSS Agent for WebSphere on a UNIX System
      • Set the JRE in the PATH Variable
      • Apply the Unlimited Cryptography Patch to the JRE for SiteMinder WSS Agents
      • Configure the JVM to Use the JSafeJCE Security Provider
      • Run the Installer to Install a SiteMinder WSS Agent Using a GUI
      • Run the Installer to Install a SiteMinder WSS Agent Using a UNIX Console
      • Install a SiteMinder WSS Agent Using the Unattended Installer
      • Copy cryptojFIPS.jar to the WebSphere JRE
      • Installation and Configuration Log Files
      • How to Configure Agents and Register a System as a Trusted Host
        • Gather Information Required for SiteMinder WSS Agent Configuration
        • Configure a SiteMinder WSS Agent and Register a Trusted Host
          • Run the SiteMinder WSS Agent Configuration Program on UNIX or Linux Systems
            • Installation and Configuration Log Files
            • Modify the SmHost.conf File
          • Re-register a Trusted Host Using the Registration Tool (UNIX)
          • Register Multiple Trusted Hosts on One System (UNIX)
      • Uninstall the SiteMinder WSS Agent
    • Upgrade a SOA Agent to a 12.52 WSS Agent
      • How to Upgrade a SOA Agent
        • Locate the Platform Support Matrix
        • Verify That the LD_PRELOAD Variable Does Not Conflict with Existing Agent
        • Run the Installation Wizard to Upgrade Your Agent on Windows
        • Run the Installation Wizard to Upgrade your Agent on UNIX/Linux
        • Set the Library Path Variable Before Configuring your Upgraded Agent on UNIX/Linux
        • Run the Configuration Wizard on Your Upgraded SiteMinder WSS Agent on Windows
        • Run the Configuration Wizard on Your Upgraded SiteMinder WSS Agent on UNIX/Linux
    • Configure the SiteMinder WSS Agent
      • How to Configure the SiteMinder WSS Agent
      • SiteMinder WSS Agent for WebSphere Configuration File
      • Agent Configuration Object
      • SiteMinder WSS Agent Configuration Parameters
      • Configure the Username and Password Digest Token Age Restriction
    • Configure WebSphere to Work with the SiteMinder WSS Agent
      • Set the JAVA_AGENT_ROOT JVM System Property
      • Set the log.log-config-properties Environment Variable
      • Configure General WebSphere Settings
        • Enable WebSphere Security Options
        • Configure LDAP as a WebSphere User Registry
      • Configure the SiteMinder WSS Agent Login Module in WebSphere
    • SiteMinder WSS Agent for IBM WebSphere Logging
      • SiteMinder WSS Agent Logging
      • Log Files
        • SiteMinder WSS Agent Log
        • SiteMinder WSS Agent XML Message Processing Logging
      • Change the SiteMinder WSS Agent Log File Name
      • Append Messages to an Existing SiteMinder WSS Agent Log File
      • Set the SiteMinder WSS Agent File Log Level
      • Roll Over the SiteMinder WSS Agent Log File
      • Disable SiteMinder WSS Agent XML Message Processing Logging
      • SiteMinder WSS Agent Log Configuration File Summary
      • How to Set Log Files, and Command-line Help to Another Language
        • Determine the IANA Code for Your Language
        • Environment Variables
          • Set the Locale Variable on Windows Operating Environments
            • Verify the Locale Variable Value on Windows Operating Environments
          • Set the Locale Variable on UNIX or Linux Operating Environments
    • Final Steps
      • Restart WebSphere
      • Edit Deployment Descriptors of JAX-RPC Applications
      • Configure Policies for the SiteMinder WSS Agent
  • CA SiteMinder® Agent for JBoss
    • Overview
      • Introduction
      • Required Background Information
      • SiteMinder Agent Security Interceptor
        • How the SiteMinder Agent Security Interceptor Works
        • SiteMinder Agent Security Interceptor Components
          • SiteMinder Agent Authenticators
          • SiteMinder Agent Login Module
      • WSS Agent Security Interceptor
        • How the WSS Agent Security Interceptor Works
        • WSS Agent Security Interceptor Components
          • WSS Agent JAX-WS Handler
          • WSS Agent JMS JAX-RPC Handler
          • WSS Agent HTTP JAX-RPC Handler
          • WSS Agent Login Module
    • Install the SiteMinder Agent
      • Installation Overview
      • Install Preparation
        • Locate the Platform Support Matrix
        • Software Requirements
        • Installation Checklist
        • Additional Steps for SiteMinder Agent Security Interceptor Installations
      • Installation Location References
      • Preconfigure Policy Objects for the SiteMinder Agent
        • Policy Object Preconfiguration Overview
        • Preconfigure the Policy Objects
      • Apply the Unlimited Cryptography Patch to the JRE
      • Install the SiteMinder Agent
        • Installation Options
        • Information Required During SiteMinder Agent Installation
        • Install a SiteMinder Agent on a Windows System
          • Set the JRE in the Path Variable
          • Run the Installation on Windows
          • Install the SiteMinder Agent Using the Unattended Installer on Windows
        • Install a SiteMinder Agent on a UNIX System
          • Set the JRE in the PATH Variable
          • Run the Installer in GUI Mode on UNIX
          • Run the Installer in Console Mode on UNIX
          • Install the SiteMinder Agent Using the Unattended Installer on UNIX
      • Configure the JVM to Use the JSafeJCE Security Provider
      • How to Configure the Agent and Register A System as a Trusted Host on Windows
        • Gather Information Required for SiteMinder WSS Agent Configuration
        • Configure Agents and Register Your System as a Trusted Host
          • Installation and Configuration Log Files
          • Modify the SmHost.conf File
        • Re-register a Trusted Host Using the Registration Tool
        • Register Multiple Trusted Hosts on One System
      • How to Configure the Agent and Register a System as a Trusted Host on UNIX
        • Gather Information Required for SiteMinder WSS Agent Configuration
        • Configure Agents and Register a Trusted Host in GUI or Console Mode
          • Installation and Configuration Log Files
          • Modify the SmHost.conf File
        • Re-register a Trusted Host Using the Registration Tool
        • Register Multiple Trusted Hosts on One System
      • Uninstall a SiteMinder Agent for JBoss
    • Configure the SiteMinder Agent
      • SiteMinder Agent for JBoss Configuration File
      • Agent Configuration Object
      • SiteMinder Agent Configuration Parameters
    • Configure JBoss to Work with the SiteMinder Agent
      • Configure Agent-related Environment Settings on JBoss 5.x
        • Set the JBoss 5.x Environment on Windows
        • Set the JBoss 5.x Environment on UNIX
      • Configure Agent-related Environment Settings on JBoss 6.x
        • Set the JBoss 6.x Environment on Windows
        • Set the JBoss 6.x Environment on UNIX
    • Configure SiteMinder Agent Logging
      • Logging Overview
      • Configure SiteMinder Agent Logging on JBoss 5.x
      • Configure SiteMinder Agent XML Message Processing Logging on JBoss 5.x
      • Configure Logging on JBoss 6.x
      • How to Set Log Files, and Command-line Help to Another Language
        • Determine the IANA Code for Your Language
        • Environment Variables
          • Set the Locale Variable on Windows Operating Environments
            • Verify the Locale Variable Value on Windows Operating Environments
          • Set the Locale Variable on UNIX or Linux Operating Environments
    • Configure the SiteMinder Agent Security Interceptor to Protect Web Applications on JBoss 5.x
      • Configure SiteMinder Agent Authenticators
        • Configure SiteMinder Agent Authenticators For All Web Applications on JBoss 5.x
        • Configure a SiteMinder Agent Authenticator for an Individual Application on JBoss 5.x
      • Define a JBossSX Security Domain for the SiteMinder Agent Login Module
      • Configure Web Applications to Invoke the SiteMinder Agent Security Interceptor
        • Edit the Application Deployment Descriptor to Enable Security
        • Map Web Applications to the SiteMinderDomain Security Domain
      • Restart the JBoss Application Server
    • Configure the SiteMinder Agent Security Interceptor to Protect Web Applications on JBoss 6.x
      • Configure the SiteMinder Agent Authenticator for Applications on JBoss 6.x
      • Make the CA SiteMinder® Agent Java Class Accessible to Your Applications
        • Configure the CA SiteMinder® Agent as a Global Module
          • Resolve a Conflict Between the JBoss and WSS Agent xml-security Libraries if the SiteMinder Agent is Defined as a Global Module
        • Configure the SiteMinder Agent as a Per-Application Dependency
      • Define a JBossSX Security Domain for the SiteMinder Agent Login Module on JBoss 6.x
      • Configure Web Applications to Invoke the SiteMinder Agent Security Interceptor
        • Edit the Application Deployment Descriptor to Enable Security
        • Map Web Applications to the SiteMinderDomain Security Domain
      • Restart the JBoss Application Server
    • Configure SiteMinder Policies to Protect Web Applications
      • Configure a SiteMinder Agent Security Interceptor Authentication Realm
      • (Optional) Configure the Agent to Return Group Membership to JBoss Using Responses
      • Example: Configure the SiteMinder Agent Web Interceptor to return groups using responses
      • Configure Security Policies for the Proxy Server Web Agent
    • Configure the WSS Agent Security Interceptor to Protect Web Services on JBoss 5.x
      • Configure WSS Agent Security Interceptor Protection for JAX-RPC Web Services Over HTTP Transport
        • Configure the WSS Agent JAX-RPC HTTP Handler for all JAX-RPC HTTP Web Services
        • Configure the WSS Agent JAX-RPC HTTP Handler for a Single Web Service
      • Configure WSS Agent Security Interceptor Protection for JAX-WS Web Services Over HTTP Transport
        • Configure the WSS Agent JAX-WS HTTP Handler for all JAX-WS HTTP Web Services
        • Configure the WSS Agent JAX-WS HTTP Handler for a Single JAX-WS HTTP Web Service
      • Configure WSS Agent Security Interceptor Protection for JAX-WS Web Services Over JMS Transport
        • Configure the WSS Agent JAX-WS JMS Handler for all JAX-WS JMS Web Services
        • Configure the WSS Agent JAX-WS Handler for a Single JAX-WS JMS Web Service
      • Configure the WSS Agent Login Module
      • Restart the JBoss Application Server
    • Configure the WSS Agent Security Interceptor to Protect Web Services on JBoss 6.x
      • Make the CA SiteMinder® Agent Java Class Accessible to Your Applications
        • Configure the CA SiteMinder® Agent as a Global Module
          • Resolve a Conflict Between the JBoss and WSS Agent xml-security Libraries if the SiteMinder Agent is Defined as a Global Module
        • Configure the SiteMinder Agent as a Per-Application Dependency
      • Configure the WSS Agent JAX-RPC HTTP Handler to Protect Web Services in JBoss 6.x
      • Configure WSS Agent Security Interceptor Protection for JAX-WS Web Services Over HTTP Transport
        • Configure the WSS Agent JAX-WS HTTP Handler to Protect all JAX-WS HTTP Web Services on JBoss 6.x
        • Configure the WSS Agent JAX-WS HTTP Handler for a Single JAX-WS HTTP Web Service
      • Configure WSS Agent Security Interceptor Protection for JAX-WS Web Services Over JMS Transport on JBoss 6.x
        • Configure the WSS Agent JAX-WS JMS Handler for all JAX-WS JMS Web Services on JBoss 6.x
        • Configure the WSS Agent JAX-WS Handler for a Single JAX-WS JMS Web Service on JBoss 6.x
      • Define a JBossSX Security Domain for the SiteMinder Agent Login Module on JBoss 6.x
      • Restart the JBoss Application Server
    • Troubleshooting
      • Messages Are Not in the Expected Format Upon WSS Agent JAX-RPC Handler Authentication Failure
      • WSS Agent Fails to Generate Signed SAML Session Ticket Responses
• Programming Guides
  • SDK Overview
    • About the SDK
      • Introduction to the SiteMinder SDK
      • Architectural Overview
      • Policy Server Access
      • Installed Directory Structure
      • SDK Samples
        • Sample Subdirectories
      • SiteMinder Test Tool
      • SDK Documentation
      • Other SiteMinder Documentation
      • Support for Custom Code
  • Programming Guide for Perl
    • Perl Scripting Overview
      • About the SiteMinder Command Line Interface
      • Installation Path
        • Perl Location
      • Where to Run Your Scripts
      • CLI Example: Create a Policy Store Object
      • CLI Example: View and Set Individual Properties
      • Location of Sample Scripts
      • Related Documentation
        • Object Dependencies Poster
    • Agent API
      • About Agents and the Agent API
      • Write a Script against the Agent API
      • Single Sign-on and the Agent API
        • Single Sign-on Support for Custom Agents
        • Single Sign-on Support for Standard Agents
      • Session Information
        • Advantages of Session Variables
        • SiteMinder Support
        • Requirements for Using Session Variables
        • End of Session Cleanup
      • Objects and the Object Hierarchy
    • CLI Agent API Methods
      • Agent Administration Methods
        • AddServerConfig Method—Adds Policy Server Configurations to Agent API Object
        • Connect Method—Establishes Connection between Agent API and Policy Server
        • CreateBootstrapFile Method—Generates Bootstrap File for Connecting to Agent
        • CreateUser Method—Creates a User Object
        • Disconnect Method—Closes Connection between Agent and Policy Server
        • DoManagement Method—Requests Agent Commands from Policy Server
        • GetResource Method—Retrieves the Specified Resource
        • IncrementRefCount Method—Increment the Reference Count
        • New Method—Constructs the Agent API
        • PrintDebugTrace Method—Outputs Trace Information to Console
        • ProcessAuthResponse Method--Extracts Information from a Login of Change Password
        • SetErrorCallback Method—Registers Subroutine that Processes Error Messages
        • SetTraceCallback Method—Registers Subroutine that Processes Trace Messages
      • Resource Methods
        • GetAuthType Method—Retrieves the Type of Credentials Required
        • IsProtected Method—Checks whether SiteMinder Is Protecting Resource
      • Response Methods
        • GetAttributes Method—Retrieves List of Available Response Attributes
        • GetSession Method—Retrieves the Session from the Response
      • Response Attribute Methods
        • GetFlags Method—Retrieves Response Attribute's Flags
        • GetID Method—Retrieves Response Attribute's ID or Agent Command's ID
        • GetName Method—Retrieves Response Attribute's Name
        • GetTTL Method—Retrieves Response Attribute's TTL Value
        • GetValue Method—Retrieves Response Attribute's Value
      • Server Configuration Method
        • IPAddress Method—Sets or Retrieves Policy Server's IP Address
      • Session Methods
        • AddParameter Method—Adds Session Variable Name-Value Pair to Parameters List
        • DelVariables Method—Deletes Session Variables from Session Store
        • GetID Method—Retrieves the Session ID
        • GetReason Method—Retrieves the Session's Reason ID
        • GetSpec Method—Retrieves the Encrypted Session Specification
        • GetVariables Method—Retrieves Session Variables from Session Store
        • IdleTimeout Method—Retrieves Session's Idle Timeout Value
        • MaxTimeout Method—Retrieves Session's Maximum Timeout Value
        • SetVariables Method—Writes Session Variables to Session Store
      • Single Sign-on Token Methods
        • Decode Method—Decodes a Single Sign-on Token
        • GetString Method—Retrieves String Representation of SSO Token Object
        • GetVersion Method—Retrieves SiteMinder Version of SSO Token
        • IsThirdParty Method—Determines Whether the Token Is Custom
      • User Methods
        • Audit Method—Audits Authorizations Performed out of Agent Cache
        • Certificate Method—Sets or Retrieves User's X.509 Cerficate
        • CertificateFile Method—Sets or Retrieves User's X.509 Certificate Using File
        • CreateSSOToken Method—Creates Single Sign-on Token Object
        • CustomData Method—Sets or Retrieves Custom Authentication Data
        • FormData Method—Sets or Retrieves HTML Forms-based Authentication Data
        • GetResponse Method—Returns Response After IsAuthorized or Login
        • Impersonate Method—Allows One User to Impersonate Another
        • IsAuthorized Method—Determines Whether User Is Authorized
        • IsAuthorizedEx Method--Determines Whether User Is Authorized
        • Login Method—Performs Session Login and Validation
        • Logout Method—Logs the User out of the Session
        • Name Method—Sets or Retrieves the User's Username
        • Password Method—Sets or Retrieves the User's Password
        • Validate Method—Validates a Session Specification
    • Agent Operations
      • Resource Protection
      • Responses and Response Attributes
        • Retrieve Response Attributes
      • Session Management
      • Policy Server Commands
    • Policy Management API
      • About the Policy Server and the Policy Management API
        • Location of the Policy Management API
      • Write a Script against the Policy Management API
        • Script Execution Performance Enhancement
      • Federation Programming
        • SAML Assertions
        • SAML 1.x
          • SAML 1.x Pseudo-code Example
        • SAML 2.0
          • Single Sign-on Example
          • SAML 2.0 Pseudo-code Example
          • SAML 2.0 Attribute Authority
          • SAML 2.0 Indexed Endpoints
        • WS-Federation
        • Sample Scripts
      • Affiliate Domains
      • Authentication Scheme Configuration
        • Configuration Information
        • Configuration Tables
          • Anonymous Template
          • Basic Over SSL Template
          • Basic Template
          • Custom Template
          • HTML Form Template
          • RADIUS CHAP/PAP Template
          • RADIUS Server Template
          • SafeWord HTML Form Template
          • SafeWord Template
          • SAML Artifact Template
          • SAML POST Template
          • SAML 2.0 Template
          • SecurID HTML Form Template
          • SecurID Template
          • smauthetsso Authentication Scheme
          • TeleID Template
          • Windows Authentication Template
          • WS-Federation Template
          • X.509 Client Cert and Basic Template
          • X.509 Client Cert and Form Template
          • X.509 Client Cert or Basic Template
          • X.509 Client Cert or Form Template
          • X.509 Client Cert Template
    • CLI Policy Management Methods
      • Administrator Methods
        • AuthScheme Method—Sets or Retrieves an Authentication Scheme
        • Description Method—Sets or Retrieves the Description of an Administrator
        • ManageAllDomains Method—Grants or Revokes Privileges to Manage Policy Server Objects
        • ManageDomainObjects Method—Grants or Revokes Privileges to Manage Domain Objects
        • ManageKeysAndPwdPolicy Method—Grants or Revokes Privileges to Manage Keys and Password Policies
        • ManageUsers Method—Grants or Revokes Privileges to Manage Users
        • Name Method—Sets or Retrieves the Name of an Administrator
        • Password Method—Sets or Retrieves the Administrator Password
        • UserDirectory Method—Sets or Retrieves an External User Directory
      • Affiliate Attribute Methods
        • GetAttrType Method—Retrieves the Affiliate Attribute Type
        • GetValue Method—Retrieves the Value of the Affiliate Attribute
      • Affiliate Domain Methods
        • AddAdmin Method—Associates an Administrator with an Affiliate Domain
        • AddUserDir Method—Associates a User Directory with an Affiliate Domain
        • CreateAffiliate Method—Creates an Affiliate Object
        • CreateSAMLServiceProvider Method—Creates a SAML Service Provider
        • CreateWSFEDResourcePartner Method—Creates a WS-Federation Resource Partner
        • DeleteAffiliate Method—Deletes an Affiliate from a Domain
        • DeleteSAMLServiceProvider Method—Deletes a SAML Service Provider
        • DeleteWSFEDResourcePartner Method—Deletes a Resource Partner
        • Description Method—Retrieves or Sets a Description
        • GetAffiliate Method—Retrieves an Affiliate Object
        • GetAllAdmins Method—Retrieves all Administrators
        • GetAllAffiliates Method—Retrieves All Affiliates in a Domain
        • GetAllSAMLServiceProviders Method—Retrieves all Service Providers associated with the Affiliate Domaine
        • GetAllWSFEDResourcePartners Method—Retrieves all WSFED Resource Partners
        • GetSAMLServiceProvider Method—Retrieves a Specified Service Provider
        • GetSAMLServiceProviderByID Method—Retrieves a Specified Service Provider
        • GetUserDirSearchOrder Method—Retrieves Search Order of a User Directory
        • GetWSFEDResourcePartner Method—Retrieves Resource Partner
        • GetWSFEDResourcePartnerById Method—Retrieves Resource Partner by ID
        • Name Method—Sets or Retrieves Affiliate Domain Name
        • RemoveAdmin Method—Dissasocciates an Administrator from an Affiliate Domain
        • RemoveUserDir Method—Disassociates a User Directory from an Affiliate Domain
        • SetUserDirSearchOrder Method—Sets the Order for Searching Directory Objects
      • Affiliate Object Methods
        • AddAttribute Method—Adds a New Affiliate Attribute
        • AddUser Method—Adds a New User to the Affiliate Object
        • AllowNotification Method—Sets or Retrieves the Event Notification Property
        • AssertionPluginClass Method—Sets or Retrieves the Name of an Assertion Generator Plug-in
        • AssertionPluginParameters Method—Sets or Retrieves a Parameter String
        • Audience Method—Sets or Retrieves a URI
        • AuthURL Method—Sets or Retrieves a URL
        • ConsumerURL Method—Sets or Retrieves a URL
        • CreateIPHostConfigName Method—Creates an IP Configuration Object from the Specified Host Name
        • CreateIPConfigRange Method—Creates an IP Configuration Object
        • CreateIPConfigSingleHost Method—Creates an IP Configuration Object from the Specified IP Address
        • CreateIPConfigSubnetMask Method—Creates an IP Configuration Object
        • DeleteIPConfig Method—Deletes an IP Configuration Object
        • Description Method—Sets or Retrieves the Description of an Affiliate Object
        • GetAllAttributes Method—Retrieves Attributes for an Affiliate Object
        • GetAllIPConfigs Method—Retrieves All IP Configuration Objects for an Affiliate
        • GetAllUsers Method—Retrieves All Users Associated with an Affiliate
        • IsEnabled Method—Sets or Retrieves the Enabled Flag for the Affiliate
        • Name Method—Sets or Retrieves the Affiliate Name
        • Password Method—Sets or Retrieves a Password for an Affiliate
        • RemoveAttribute Method—Removes an Attribute from an Affiliate
        • RemoveUser Method—Removes a User from an Affiliate
        • SAMLProfile Method—Sets or Retrieves the Type of SAML Profile
        • SAMLVersion Method—Sets or Retrieves the SAML Version for the Affiliate
        • Save Method—Saves the Affiliate to the Policy Store
        • SessionSyncInterval Method—Sets or Retrieves the Session Synchronization Property
        • SharedSessioning Method—Sets or Retrieves the Shared Session Property
        • SkewTime Method—Sets or Retrieves the Skew Time Property
        • ValidityDuration Method—Sets or Retrieves the Duration a SAML Assertion Is Valid
      • Agent Methods
        • ConvertFromLegacy Method—Converts a v4.x Agent to a v5.x Agent
        • ConvertToLegacy Method—Converts a v5.x Agent to a v4.x Agent
        • Description Method—Sets or Retrieves the Agent Description
        • IPAddress Method—Sets or Retrieves the Agent's IP Address
        • Name Method—Sets or Retrieves the Name of the Agent
        • RealmHintAttrID Method—Sets or Retrieves the Hint Attribute
        • SharedSecret Method—Sets or Retrieves the Shared Secret for a v4.x Agent
      • Agent Configuration Methods
        • AddAssociation Method—Adds a Name and Value for this Configuration
        • AddAssociationMultiValue Method—Adds a Multi-valued Configuration Parameter
        • Description Method—Sets or Retrieves the Description of the Agent Configuration Object
        • GetAssociations Method—Retrieves a List of All the Configuration Parameters
        • Name Method—Sets or Retrieves the Agent Configuration Object Name
        • RemoveAssociation Method—Removes a Configuration Parameter
      • Agent Configuration Parameters Methods
        • Name Method—Sets or Retrieves the Name Portion of the Agent Configuration Parameter
        • Flags Method—Sets or Retrieves the Encryption Flag Attribute
        • Value Method—Sets or Retrieves the Value of the Agent Configuration Parameter
      • Agent Type Methods
        • GetDescription Method—Retrieves the Description of the Agent Type
        • GetName Method—Retrieves the Name of the Agent Type
      • Authentication and Authorization Map Methods
        • AuthDir Method—Sets or Retrieves the Authentication Directory
        • AzDir Method—Sets or Retrieves the Authorization Directory
        • MapType Method—Sets or Retrieves the Type of Authentication and Authorization Map
      • Authentication Scheme Methods
        • AddMessageConsumerPluginToSAML1xScheme Method--Adds Message Consumer Plug-in Class Name
        • AddRedirectURLToSAML1xScheme Method--Adds Redirect Value to an Authentication Scheme
        • AddTargetConfigToSAML1xScheme Method--Sets the Default Target Configuration
        • CustomLib Method—Sets or Retrieves the Name of the Shared Library
        • CustomParam Method—Sets or Retrieves Information that Is Passed to the Authentication Scheme
        • CustomSecret Method—Sets or Retrieves the Shared Secret for the Custom Authentication Scheme
        • Description Method—Sets or Retrieves the Description of the Authentication Scheme
        • GetMessageConsumerPluginFromSAML1xScheme Method--Retrieves Message Consumer Plug-in Class Name
        • GetRedirectURLFromSAML1xScheme Method--Retrieves a Redirect URL
        • GetTargetConfigFromSAML1xScheme Method--Retrieves the Target Configuration
        • IgnorePwd Method—Specifies whether Password Policies Should Be Checked
        • IsRadius Method—Determines whether the Authentication Scheme Supports RADIUS Agents
        • IsTemplate Method—Determines whether the Authentication Scheme Is a Template
        • IsUsedByAdmin Method—Determines whether the Scheme Authenticates Administrators
        • Name Method—Sets or Retrieves the Name of the Authentication Scheme
        • ProtectionLevel Method—Sets or Retrieves the Protection Level of the Authentication Scheme
        • Save Method—Saves the Authentication Scheme to the Policy Store
        • SaveCredentials Method—Determines whether User Credentials Can Be Saved
        • Type Method—Sets or Retrieves the Authentication Scheme Type
      • Certificate Mapping Methods
        • AttrMap Method—Sets or Retrieves the Attribute Map for Certificate Mapping
        • CacheCRL Method—Determines whether To Cache Certificate Revocation List (CRL) entries
        • CertRequired Method—Determines whether Certificate Validation is Required
        • CRLUserDirectory Method—Sets or Retrieves the LDAP Directory where the Certificate Revocation List (CRL) Is Located
        • Description Method—Sets or Retrieves the Description of the Certificate Map
        • DirectoryType Method—Sets or Retrieves the Type of User Directory
        • EnableCRL Method—Determines whether To Check the Certificate Revocation List (CRL) for Revoked Certificates
        • IssuerDN Method—Sets or Retrieves the DN of the Certificate Issuer
        • UseDistributionPoints Method—Determines whether Certificate Revocation List (CRL) Searches Use a Distribution Point
        • VerifySignature Method—Determines whether SiteMinder Verifies the Certificate Authority's Signature
      • Cluster Methods
        • AddServer Method—Adds a Server to the Cluster
        • GetAllServers Method—Retrieves an Array of All the Servers in a Cluster
      • Domain Methods
        • AddAdmin Method—Adds an Administrator to the Domain
        • AddUserDir Method—Associates a User Directory with the Domain
        • CreatePolicy Method—Creates and Configures a Policy in the Domain
        • CreateRealm Method—Creates and Configures a Top-level Realm in the Domain
        • CreateResponse Method—Creates a Response
        • CreateResponseGroup Method—Creates a Response Group for the Domain
        • CreateRuleGroup Method—Creates a Rule Group for the Domain
        • DeleteGroup Method—Deletes a Group from the Domain
        • DeletePolicy Method—Deletes a Policy
        • DeleteRealm Method—Deletes a Realm in the Domain
        • DeleteResponse Method—Deletes a Response
        • Description Method—Sets or Retrieves the Description of the Domain
        • GetAllPolicies Method—Retrieves All Policies Associated with the Domain
        • GetAllRealms Method—Retrieves All Top-level Realms in the Domain
        • GetAllResponseGroups Method—Retrieves All the Response Groups Associated with the Domain
        • GetAllResponses Method—Retrieves All Responses Associated with the Domain
        • GetAllRuleGroups Method—Retrieves All Rule Groups Associated with the Domain
        • GetPolicy Method—Retrieves a Policy in the Domain
        • GetRealm Method—Retrieves a Top-level Realm in the Domain
        • GetResponse Method—Retrieves a Response Associated with the Domain
        • GetResponseGroup Method—Retrieves the Specified Response Group
        • GetRuleGroup Method—Retrieves the Specified Rule Group
        • GetUserDirSearchOrder Method—Retrieves User Directory Objects Associated with the Domain
        • GlobalPoliciesApply Method—Determines whether the Domain Is Enabled for Global Policies
        • Name Method—Sets or Retrieves the Domain Name
        • RemoveAdmin Method—Disassociates an Administrator from the Domain
        • RemoveUserDir Method—Disassociates the User Directory from the Domain
        • SetUserDirSearchOrder Method—Rearranges the Search Order of the User Directory Objects
      • Group Methods
        • Add Method—Adds an Agent, Response, Rule, or Nested Group Object to the Group
        • Contains Method—Determines whether the Group Contains the Specified Agent, Response, Rule, or Nested Group Object
        • Description Method—Sets or Retrieves the Description of the Group Object
        • GetAgent Method—Retrieves the Specified Agent Object from the Group
        • GetAgentGroup Method—Retrieves an Agent Group Object Nested within the Group
        • GetAgentType Method—Retrieves the Type of the Agent Objects Contained in the Group
        • GetAllAgentGroups Method—Retrieves All the Agent Group Objects Nested within the Group
        • GetAllAgents Method—Retrieves All the Agent Objects in the Group
        • GetAllResponseGroups Method—Retrieves All the Response Group Objects Nested within the Group
        • GetAllResponses Method—Retrieves All the Response Objects in the Group
        • GetAllRuleGroups Method—Retrieves All the Rule Group Objects Nested within the Group
        • GetAllRules Method—Retrieves All the Rule Objects in the Group
        • GetResponse Method—Retrieves the Specified Response Object from the Group
        • GetResponseGroup Method—Retrieves a Response Group Object Nested within the Group
        • GetRule Method—Retrieves the Specified Rule Object from the Group
        • GetRuleGroup Method—Retrieves a Rule Group Object Nested within the Group
        • Name Method—Sets or Retrieves the Name of the Group Object
        • Remove Method—Removes the Specified Group Member from the Group
      • Host Configuration Methods
        • AddCluster Method—Adds an Empty Cluster to the Host Configuration
        • AddServer Method—Adds a Non-clustered Server to the Host Configuration
        • Description Method—Sets or Retrieves the Description of the Host Configuration Object
        • EnableFailover Method—Sets or Retrieves the Enable Failover Flag
        • FailoverThreshold Method—Sets or Retrieves the Failover Threshold Percentage
        • GetAllClusters Method—Retrieves an Array of Policy Management Cluster Objects
        • GetAllServers Method—Retrieves an Array of Non-clustered Server Objects
        • MaxSocketsPerPort Method—Sets or Retrieves the Maximum Number of TCP/IP Sockets
        • MinSocketsPerPort Method—Sets or Retrieves the Minimum Number of TCP/IP Sockets
        • Name Method—Sets or Retrieves the Name of the Host Configuration Object
        • NewSocketStep Method—Sets or Retrieves the New Socket Step Value for the Host Configuration
        • RemoveAllClusters Method—Removes All Cluster Objects Associated with This Host Configuration
        • RemoveAllServers Method—Removes All Non-clustered Policy Server Objects from the Host Configuration
        • RequestTimeout Method—Sets or Retrieves the Request Timeout Value
      • Initialization Methods
        • CreateSession Method—Creates a Policy Server Session
        • DisableAudit Method—Sets the Flag to Enable or Disable Auditing
        • DisableCacheUpdates Method—Deprecated
        • DisableManagementWatchDog Method—Reads or sets the Enabled State of the SiteMinder Management Watchdog
        • DisableValidation Method—Reads or Sets the Enabled State for Validation of Policy Server Objects
        • EnableCache Method—Deprecated
        • LoadAgentTypeDictionary Method—Reads or Sets the Enabled State for the Agent Type Dictionary
        • New Method—Constructor for the Policy Management API
        • PreLoadCache Method—Reads or Sets the Enabled State for Preloading of Caches
        • PrintDebugTrace Method—Enables or Disables Printing Debug (Trace) Information Example
      • IP Configuration Methods
        • GetEndIPAddress Method—Retrieves the Ending IP Address
        • GetHostName Method—Retrieves the Host Name Associated with a Host Name IP Address Restriction
        • GetIPAddress Method— Retrieves an IP address for an IP address restriction
        • GetSubnetMask Method—Retrieves the Subnet Mask for a Subnet Address
        • GetType Method—Retrieves the Type of the IP Address Restriction
      • ODBC Query Scheme Methods
        • Description Method—Sets or Retrieves the Description of the ODBC Query Scheme
        • Name Method—Sets or Retrieves the ODBC Query Scheme Name
        • QueryAuthenticateUser Method—Sets or Retrieves a Query that Fetches a User's Password
        • QueryEnumerate Method—Sets or Retrieves a Query that Lists the Names of User Objects
        • QueryGetGroupProp Method—Sets or Retrieves a Query that Fetches the Value of a Group Property
        • QueryGetGroupProps Method—Sets or Retrieves a List of Group Properties
        • QueryGetGroups Method—Sets or Retrieves a Query that Fetches the Names of the Groups that the User Is a Member of
        • QueryGetObjInfo Method—Sets or Retrieves a Query that Fetches the Class of the Object
        • QueryGetUserProp Method—Sets or Retrieves a Query that Fetches the Value of a User Property
        • QueryGetUserProps Method—Sets or Retrieves a List of User Properties
        • QueryInitUser Method—Sets or Retrieves a Query that Determines whether a User Exists in the Database
        • QueryIsGroupMember Method—Sets or Retrieves a Query that Lists the Group Membership for a Particular User
        • QueryLookup Method—Sets or Retrieves a Query that Fetches Objects
        • QueryLookupGroup Method—Sets or Retrieves a Query that Fetches a Group Name
        • QueryLookupUser Method—Sets or Retrieves a Query that Fetches a User Name
        • QuerySetGroupProp Method—Sets or Retrieves a Query that Sets the Value of a Group Property
        • QuerySetPassword Method—Sets or Retrieves a Query that Changes a User Password
        • QuerySetUserProp Method—Sets or Retrieves a Query that Sets the Value of a User Property
      • Password Policy Methods
        • AllowNestedGroups Method—Allows the Password Policy To Be Configured for Nested Groups
        • AllowLowerPriorityPolicies Method—Sets Flag To Determine whether Password Policies with Lower Priority Should Be Evaluated
        • AuthLoginTrackFailure Method—Allows a User To Login if Login Tracking Data Fails
        • BadLoginDisablementPeriod Method—Sets or Retrieves the Number of Minutes Before a User Account Is Disabled
        • Description Method—Sets or Retrieves the Description of the Password Policy
        • DictionaryMatch Method—Sets the Minimum Number of Letters Required To Qualify a Password for Dictionary Checking
        • DictionaryPath Method—Sets or Retrieves the Location of a Dictionary File
        • DisableAfterInactivityExpiration Method—Disables an Inactive User's Account
        • DisableAfterPwdExpiration Method—Disables a User's Aaccount after the User's Password Expires
        • EntireDir Method—Determines Whether the Password Policy Applies to the Entire Directory
        • ExpirationDelay Method—Specifies the Number of Days a Password Can Be Used
        • IsEnabled Method—Enables or Disables a Password Policy
        • MaxLoginFailures Method—Sets or Retrieves the Maximum Number of Failed Login Attempts
        • MaxLoginInactive Method—Sets or Retrieves the Number of Days of Inactivity Are Allowed
        • Name Method—Sets or Retrieves the Password Policy Name
        • PwdAddRegExpMatch Method—Adds a Regular Expression to the List of Expressions that New Passwords Must Match
        • PwdAddRegExpNoMatch Method—Adds a Regular Expression to the List of Expressions that New Passwords Must NOT Match
        • PwdAllowDigits Method—Specifies whether Passwords Are Allowed To Have Numeric Characters
        • PwdAllowLowercase Method—Specifies whether Passwords Are Allowed To Have Lower Case Letters
        • PwdAllowNonAlphNum Method—Specifies whether Passwords Are Allowed To Have Non-Alphanumeric Characters
        • PwdAllowNonPrintable Method—Specifies whether Passwords Are Allowed To Have Non-Printable Characters
        • PwdAllowPunctuation Method—Specifies whether Passwords Are Allowed To Have Punctuation Mark Characters
        • PwdAllowUpperCase Method—Specifies whether Passwords Are Allowed To Have Upper Case Letters
        • PwdExpiryWarning Method—Sets or Retrieves the Number of Days in Advance To Notify the User that the Password Will Expire
        • PwdForceLowerCase Method—Determines whether To Convert Upper Case Letters in a New Password to Lower Case
        • PwdForceUpperCase Method—Determines whether To Convert Lower Case Letters in a New Password to Upper Case
        • PwdGetAllRegExpMatch Method—Retrieves the Name Tags of the Regular Expressions that New Passwords Must Match
        • PwdGetAllRegExpNoMatch Method—Retrieves the Name Tags of the Regular Expressions that New Passwords Must NOT Match
        • PwdGetRegExp Method—Retrieves the Regular Expression for the Specified Name Tag
        • PwdIgnoreSequence Method—Determines whether To Ignore Sequence when Calculating the New Password
        • PwdMaxLength Method—Sets or Retrieves the Maximum Length for User Passwords
        • PwdMaxRepeatingChar Method—Sets or Retrieves the Maximum Number of Identical Characters
        • PwdMinAlpha Method—Sets or Retrieves the Minimum Number of Alphabetic Characters a Password Must Contain
        • PwdMinAlphaNum Method—Sets or Retrieves the Minimum Number of Alphanumeric Characters a Password Must Contain
        • PwdMinLength Method—Sets or Retrieves the Minimum Length for User Passwords
        • PwdMinLowercase Method—Sets or Retrieves the Minimum Number of Lower Case Letters a Password Must Contain
        • PwdMinNonAlpha Method—Sets or Retrieves the Minimum Number of Non-Alphanumeric Characters A Password Must Contain
        • PwdMinNonPrintable Method—Sets or Retrieves the Minimum Number of Non-Printable Characters a Password Must Contain
        • PwdMinNumbers Method—Sets or Retrieves the Minimum Number of Numeric Characters a Password Must Contain
        • PwdMinProfileMatch Method—Specifies the Minimum Character Sequence To Check against the User's Personal Information
        • PwdMinPunctuation Method—Sets or Retrieves the Minimum Number of Punctuation Marks a Password Must Contain
        • PwdMinUppercase Method—Sets or Retrieves the Minimum Number of Upper Case Letters a Password Must Contain
        • PwdPercentDiff Method—Sets or Retrieves the Percentage of Different Characters a New Password Must Contain
        • PwdPolicyPriority Method—Sets or Retrieves the Password's Evaluation Priority Setting
        • PwdRedirectionURL Method—Sets or Retrieves the URL where the User is Redirected Example
        • PwdRemoveRegExp Method—Removes the Regular Expression Associated with the Specified Name Tag
        • PwdReuseCount Method—Specifies the Number of New Passwords that Must Be Used
        • PwdReuseDelay Method—Specifies the Number of Days a User Must Wait Before Reusing a Password
        • ReEnableAfterIncorrectPwd Method—Determines whether To Re-enable a User Account after the Entry of an Incorrect Password
        • Save Method—Saves the Password Policy to the Policy Store
        • StripEmbeddedWhitespace Method—Determines whether To Strip New Passwords of Embedded White Space
        • StripLeadingWhitespace Method—Determines whether To Strip New Passwords of Leading White Space
        • StripTrailingWhitespace Method—Determines whether To Strip New Passwords of Trailing White Space
        • TrackLoginDetails Method—Determines whether To Track Authentication Attempts and Successful Logins
        • UserDirClass Method—Sets or Retrieves the Directory Class if the Password Policy Applies to a Part of the Directory
        • UserDirectory Method—Sets or Retrieves the User Directory for the Password Policy
        • UserDirPath Method—Sets or Retrieves the Directory Path if the Password Policy Applies to a Part of the Directory
      • Policy Methods
        • ActiveExpr Method—Sets or Retrieves the Active Expression Associated with the Policy
        • AddRule Method—Adds a Rule to the Policy
        • AddUser Method—Adds a User to the Policy
        • AllowNested Method—Sets or Retrieves the AllowNested Flag
        • CreateIPHostConfigName Method—Creates an IP Address Configuration
        • CreateIPConfigRange Method—Creates an IP Address Configuration
        • CreateIPConfigSingleHost Method—Creates an IP Address Configuration
        • CreateIPConfigSubnetMask Method—Creates an IP Address Configuration Based on the IP Address and Subnet Mask
        • DeleteIPConfig Method—Deletes the Specified IP Configuration Object
        • Description Method—Sets or Retrieves the Description of the Policy
        • EnforceANDEvaluation Method—Sets or Retrieves the ANDUser/Group Flag
        • ExcludeUser Method—Excludes or Includes a User from the Policy
        • GetAllIPConfigs Method—Retrieves All IP Address Restriction Objects in the Policy
        • GetAllRules Method—Retrieves All Rules Associated with the Policy
        • GetAllUsers Method—Retrieves All Users Associated with the Policy
        • IsEnabled Method—Enables or Disables the Policy
        • Name Method—Sets or Retrieves the Policy Name
        • RemoveResponse Method—Removes the Response for a Configured Rule in the Policy
        • RemoveRule Method—Removes the Specified Rule from the Policy
        • RemoveUser Method—Removes a User from the Policy
        • SetResponse Method—Sets the Response for a Configured Rule in the Policy
      • Policy Server Connectivity Methods
        • GetPorts Method—Deprecated
        • GetServerAddress Method—Retrieves the Host Name or IP Address of the Policy Server
        • GetServerPort Method—Retrieves TCP Port for Policy Server or Server Cluster
      • Realm Methods
        • Agent Method—Sets or Retrieves the Agent for the Realm
        • AuthScheme Method—Sets or Retrieves the Authentication Scheme for the Realm
        • AzUserDir Method—Sets or Retrieves the Authorization User Directory for the Realm
        • CreateChildRealm Method—Creates and Configures a Child Realm
        • CreateRule Method—Creates and Configures a Rule under the Realm
        • DeleteChildRealm Method—Deletes a Top-level Realm within the Realm
        • DeleteRule Method—Deletes an Existing Rule within the Realm
        • Description Method—Sets or Retrieves the Description of the Realm
        • Flush Method—Flushes the Realm from the Resource Cache
        • GetAllChildRealms Method—Retrieves All Top-level Realms within the Realm
        • GetAllRules Method—Retrieves the Rules Associated with the Realm
        • GetChildRealm Method—Retrieves a Top-level Child Realm under the Realm
        • GetDomain Method—Retrieves the Domain Associated with the Realm
        • GetRule Method—Retrieves an Existing Rule in the Realm
        • IdleTimeout Method—Sets or Retrieves the Maximum Time a User Can Remain Inactive in the Realm
        • MaxTimeout Method—Sets or Retrieves the Maximum Time a User Can Access the Realm
        • Name Method—Sets or Retrieves the Realm Name
        • ProcessAuEvents Method—Sets or Retrieves the Authentication Event Flag in the Realm
        • ProcessAzEvents Method—Sets or Retrieves the Authorization Event Flag in the Realm
        • ProtectResource Method—Sets or Retrieves the Current Resource Protection Flag Example
        • RegScheme Method—Sets or Retrieves the Registration Scheme for the Realm
        • SessionDrift Method--Sets or Retrieves the Session Drift
        • ResourceFilter Method—Sets or Retrieves the Realm Resource Filter
        • SyncAudit Method—Sets or Retrieves the Synchronous Auditing Flag
      • Registration Scheme Methods
        • Description Method—Sets or Retrieves the Registration Scheme Description
        • EnableLogging Method—Enables or Disables Registration Scheme Logging
        • Name Method—Sets or Retrieves the Registration Scheme Name
        • TemplatePath Method—Sets or Retrieves the Path of the Registration Scheme
        • UserDirectory Method—Sets or Retrieves the User Directory for the Registration Scheme
        • WelcomePageURL Method—Sets or Retrieves the Welcome Page URL for the Registration Scheme
      • Response Methods
        • CreateAttribute Method—Creates a Static Response Attribute for the Response
        • DeleteAttribute Method—Deletes a Response Attribute in the Response
        • Description Method—Sets or Retrieves the Response Description
        • GetAllAttributes Method—Retrieves a List of Configured Response Attributes
        • Name Method—Sets or Retrieves the Response Name
      • Response Attribute Methods
        • GetAgentTypeAttrName Method—Retrieves the Name of the Agent Type Attribute
        • GetTTL Method—Retrieves the Time To Live (TTL) Setting
        • GetValue Method—Retrieves the Response Attribute Value
      • Rule Methods
        • AccessType Method—Sets or Retrieves the Flag that Allows or Denies Access to the Resource Protected by the Rule
        • Action Method—Sets or Retrieves the Action for the Rule
        • ActiveExpr Method—Sets or Retrieves the Active Expression for the Rule
        • Agent Method—Sets or Retrieves an Agent Object or an Agent Group Object Associated with the Global Rule
        • Description Method—Sets or Retrieves the Description of the Rule
        • IsEnabled Method—Enables or Disables the Rule
        • Name Method—Sets or Retrieves the Rule Name
        • RegexMatch Method—Determines whether Regular Expression Pattern Matching Is Enabled
        • Resource Method—Sets or Retrieves the Resource Protected by the Rule
      • SAML 2.0 Affiliation Methods
        • GetAffiliatedSAMLAuthSchemes Method—Retrieves the SAML 2.0 Authentication Schemes Associated with This SAML Affiliation
        • GetAffiliatedSAMLServiceProviders Method—Retrieves the SAML 2.0 Service Providers Associated with this SAML Affiliation
        • Property Method—Sets or Retrieves the Specified SAML 2.0 Metadata Property
        • Save Method—Saves the Changes to the SAML 2.0 Metadata Properties of this SAML 2.0 Affiliation
      • SAML 2.0 Indexed Endpoint Methods
        • GetACSIndex Method—Retrieves Index Value of Assertion Consumer Service Object
        • GetACSBinding Method—Retrieves Protocol Binding of Assertion Consumer Service Object
        • GetACSURL Method—Retrieves URL Value of Assertion Consumer Service Object
        • GetIsDefault Method—Retrieves IsDefault Value for Assertion Consumer Service Object
      • SAML 2.0 Requester Attribute Methods
        • GetAttrNameFormat Method—Retrieves SAML Requester Attribute's Name Format
        • GetLocalName Method—Retrieves SAML Requester Attribute's Local Name
        • GetName Method—Retrieves SAML Requester Attribute's Name
      • SAML 2.0 Service Provider Methods
        • AddAssertionConsumerService Method—Adds an Assertion Consumer Service to a SAML Service Provider Object
        • AddAttribute Method—Adds an Attribute to the SAML 2.0 Service Provider
        • AddUser Method—Adds a User to the SAML 2.0 Service Provider
        • CreateIPConfigHostName Method—Creates an IP Configuration Object for the Service Provider
        • CreateIPConfigRange Method—Creates an IP Configuration Object for the Service Provider
        • CreateIPConfigSingleHost Method—Creates an IP Configuration Object for the Service Provider
        • CreateIPConfigSubnetMask Method—Creates an IP Configuration Object for the Service Provider
        • DeleteIPConfig Method—Deletes Specified IP Configuration Object
        • GetAllAttributes Method—Retrieves All Attributes for SAML 2.0 Service Provider
        • GetAllIPConfigs Method—Retrieves All IP Configuration Objects
        • GetAllAssertionConsumerServices Method—Retrieves All Assertion Consumer Services
        • GetAllUsers Method—Retrieves All Users
        • Property Method—Sets or Retrieves Metadata Property
        • RemoveAssertionConsumer Method—Removes Assertion Consumer Service
        • RemoveAttribute Method—Removes Specified Attribute
        • RemoveUser Method—Removes Specified User
        • Save Method—Saves Changes Made to Metadata Properties
      • SAML 2.0 Service Provider Attribute Methods
        • GetAttrNameFormat Method—Retrieves Format of Attribute Names
        • GetValue Method—Retrieves Service Provider Attribute Value
      • Session Methods
        • AddAttributeToSAMLScheme Method—Adds New Attribute to Authentication Scheme
        • AddTrustedHost Method—Creates or Modifies Trusted Host Object
        • CreateAdmin Method—Creates System-Level Administrator
        • CreateAffDomain Method—Creates Affiliate Domain
        • CreateAgent Method—Creates SiteMinder Agent
        • CreateAgentConfig Method—Creates Agent Configuration Object
        • CreateAgentGroup Method—Creates Agent Group
        • CreateAuthAzMap Method—Creates Directory Mapping Object
        • CreateAuthScheme Method—Creates Authentication Scheme
        • CreateCustomCertMap Method—Creates Custom Certificate Map
        • CreateDomain Method—Creates Policy Domain Object
        • CreateExactCertMap Method—Creates Certificate Map Matching User Directory Attributes
        • CreateGlobalPolicy Method—Creates Global Policy
        • CreateGlobalResponse Method—Creates Global Response
        • CreateGlobalResponseGroup Method--Creates a Domain-Specific Rule Group
        • CreateGlobalRule Method—Creates Global Rule
        • CreateGlobalRuleGroup Method--Creates a Domain-Specific Rule Group
        • CreateHostConfig Method—Creates Host Configuration Object
        • CreateODBCQueryScheme Method—Creates ODBC Query Scheme
        • CreatePwdPolicy Method—Creates Password Policy
        • CreateRegScheme Method—Creates Registration Scheme
        • CreateSAMLAffiliation Method—Creates SAML 2.0 Affiliation Object
        • CreateSAMLAuthScheme Method—Creates SAML Authentication Scheme Object
        • CreateSingleCertMap Method—Creates Single-Attribute Certificate Map
        • CreateTrustedHost Method—Creates Trusted Host Object
        • CreateUserDir Method—Creates User Directory Object
        • CreateWSFEDAuthScheme Method—Creates WS-Federation Authentication Scheme
        • DeleteAdmin Method—Deletes Administrator
        • DeleteAffDomain Method—Deletes Affiliate Domain
        • DeleteAgent Method—Deletes Agent
        • DeleteAgentConfig Method—Deletes Agent Configuration Object
        • DeleteAuthAzMap Method—Deletes Authentication and Authorization Map
        • DeleteAuthScheme Method—Deletes Authentication Scheme
        • DeleteCertMap Method—Deletes Certificate Map
        • DeleteDomain Method—Deletes Policy Domain
        • DeleteGlobalPolicy Method—Deletes Global Policy
        • DeleteGlobalResponse Method—Deletes Global Response
        • DeleteGlobalRule Method—Deletes Global Rule
        • DeleteGroup Method—Deletes Agent Group
        • DeleteHostConfig Method—Deletes Host Configuration Object
        • DeleteODBCQueryScheme Method—Deletes ODBC Query Scheme
        • DeletePwdPolicy Method—Deletes Password Policy
        • DeleteRegScheme Method—Deletes Registration Scheme
        • DeleteSAMLAffiliation Method—Deletes SAML Affiliation
        • DeleteTrustedHost Method—Deletes Trusted Host
        • DeleteUserDir Method—Deletes User Directory
        • GetAdmin Method—Retrieves Administrator
        • GetAffDomain Method—Retrieves Affiliate Domain
        • GetAgent Method—Retrieves Agent
        • GetAgentConfig Method—Retrieves Agent Configuration Object
        • GetAgentGroup Method—Retrieves Agent Group
        • GetAgentType Method—Retrieves Agent Type
        • GetAllAdmins Method—Retrieves List of All Administrators
        • GetAllAffDomains Method—Retrieves List of All Affiliate Domains
        • GetAllAgentConfigs Method—Retrieves List of All Agent Configuration Objects
        • GetAllAgentGroups Method—Retrieves List of All Agent Group Objects
        • GetAllAgents Method—Retrieves List of All Agents
        • GetAllAuthAzMaps Method—Retrieves List of All AuthAz Maps
        • GetAllAuthSchemes Method—Retrieves List of Authentication Schemes
        • GetAllCertMaps Method—Retrieves List of Certificate Mapping Objects
        • GetAllDomains Method—Retrieves List of All Domains
        • GetAllGlobalPolicies Method—Retrieves List of Global Policy Objects
        • GetAllGlobalResponses Method—Retrieves List of All Global Response Objects
        • GetAllGlobalRules Method—Retrieves List of All Global Rule Objects
        • GetAllHostConfigs Method—Retrieves List of All Host Configuration Objects
        • GetAllODBCQuerySchemes Method—Retrieves List of All ODBC Query Schemes
        • GetAllPwdPolicies Method—Retrieves List of All Password Policies
        • GetAllRegSchemes Method—Retrieves List of All Registration Schemes
        • GetAllSAMLAffiliations Method—Retrieves List of All SAML 2.0 Affiliations
        • GetAllSAMLSchemeAttributes Method—Retrieves List of All Requester Attributes
        • GetAllTrustedHosts Method—Retrieves List of All Trusted Host Objects
        • GetAllUserDirs Method—Retrieves List of All User Directories
        • GetAllVariableTypes Method—Retrieves List of All Variable Type Objects
        • GetAuthScheme Method—Retrieves Authentication Scheme Object
        • GetCertMap Method—Retrieves Certificate Mapping Object
        • GetDomain Method—Retrieves Domain Object
        • GetGlobalPolicy Method—Retrieves Global Policy Object
        • GetGlobalResponse Method—Retrieves Global Response Object
        • GetGlobalRule Method—Retrieves Global Rule Object
        • GetHostConfig Method—Retrieves Host Configuration Object
        • GetODBCQueryScheme Method—Retrieves ODBC Query Scheme Object
        • GetPwdPolicy Method—Retrieves Password Policy Object
        • GetRegScheme Method—Retrieves Registration Scheme Object
        • GetSAMLAffiliation Method—Retrieves SAML 2.0 Affiliation Object
        • GetSAMLAffiliationById Method—Retrieves SAML 2.0 Affiliation Object by ID
        • GetSharedSecretPolicy Method—Retrieves Shared Secret Policy Object
        • GetTrustedHost Method—Retrieves Trusted Host Object
        • GetUserDir Method—Retrieves User Directory Object
        • GetVariableType Method—Retrieves Variable Type Object
        • RemoveAttributeFromSAMLScheme Method—Removes Attribute from SAML Scheme
        • SAMLAuthSchemeProperties Method—Sets or Retrieves SAML Metadata Properties
        • WSFEDAuthSchemeProperties Method—Sets or Retrieves WS-Federation Properties
      • Shared Secret Rollover Methods
        • Enabled Method—Sets or Retrieves Rollover Enabled Flag for Policy
        • RolloverFrequency Method—Sets or Retrieves Rollover Frequency for Policy
        • RolloverPeriod Method—Sets or Retrieves Rollover Period for Policy
        • Save Method—Saves Shared Secret Policy Object
      • Trusted Host Methods
        • GetDescription Method—Retrieves Description of Trusted Host
        • GetIPAddress Method—Retrieves IP Address of Trusted Host
        • GetName Method—Retrieves Name of Trusted Host
        • GetSecret Method—Retrieves Shared Secret of Trusted Host
        • RolloverEnabled Method—Sets or Retrieves Shared Secret Rollover Flag
        • SetSecret Method—Sets Shared Secret of Trusted Host
      • User Methods
        • DisableByAdmin Method—Sets or Retrieves Disabled-by-Administrator Flag
        • DisableInactive Method—Sets or Retrieves Disabled-by-Inactivity Flag
        • DisableMaxLoginFail Method—Sets or Retrieves Disabled-by-Max-Login-Failure Flag
        • DisablePwdExpired Method—Sets or Retrieves Disabled-by-Password-Expired Flag
        • ForcePwdChange Method—Sets or Retrieves Force-Password-Change Flag
        • GetClass Method—Retrieves User Class
        • GetPath Method—Retrieves User Path
        • SetPassword Method—Sets a New Password
        • UserPasswordState Method—Sets or Retrieves Password State Object
        • ValidatePassword Method—Validates Password
      • User Directory Methods
        • AnonymousIDAttr Method—Sets or Retrieves Anonymous DN Name
        • ChalRespAttr Method—Sets or Retrieves Challenge/Response Name
        • Description Method—Sets or Retrieves Description of User Directory
        • DisabledAttr Method—Sets or Retrieves Name of Disabled Attribute
        • EmailAttr Method—Sets or Retrieves Email Attribute Name
        • EnableSecurityContext Method—Sets or Retrieves Security Context Flag
        • GetContents Method—Retrieves All Users in User Directory
        • GetNamespace Method—Retrieves User Directory Namespace
        • IsSecure Method—Sets or Retrieves Secure Authentication Flag
        • LookupEntry Method—Retrieves Users that Match Specified Pattern
        • MaxResults Method—Sets or Retrieves Maximum Search Results
        • Name Method—Sets or Retrieves User Directory Name
        • ODBCQueryScheme Method—Sets or Retrieves ODBC Query Scheme
        • Password Method—Sets or Retrieves User Password
        • PwdAttr Method—Sets or Retrieves Password Attribute Name
        • PwdDataAttr Method—Sets or Retrieves Password Data Attribute Name
        • RequireCredentials Method—Sets or Retrieves Whether Credentials Are Required
        • SearchRoot Method—Sets or Retrieves Directory Search Root
        • SearchScope Method—Sets or Retrieves LDAP Directory Search Scope
        • SearchTimeout Method—Sets or Retrieves Maximum Directory Search Time
        • Server Method—Sets or Retrieves a Directory-Dependent Value
        • UIDAttr Method—Sets or Retrieves Universal ID Attribute Name
        • UserLookupEnd Method—Sets or Retrieves User DN Lookup Endpoint
        • UserLookupStart Method—Sets or Retrieves User DN Lookup Starting Point
        • Username Method—Sets or Retrieves Username
        • ValidateEntry Method—Validates User Directory Entry
      • User Password State Methods
        • DisabledTime Method—Sets or Retrieves Time Object Was Disabled
        • LastPWChangeTime Method—Sets or Retrieves Time Password Last Changed
        • LastLoginTime Method—Sets or Retrieves Last Login Time
        • LoginFailures Method—Sets or Retrieves Number of Login Failures
      • Variable Type Methods
        • GetName Method—Retrieves Name of Variable Type Object
      • WS-Federation Resource Partner Methods
        • AddAttribute Method—Adds Attribute to Resource Partner
        • AddUser Method—Adds User to Resource Partner
        • CreateIPConfigHostName Method—Creates Object Based on Specified Host
        • CreateIPConfigSingleHost Method—Creates Object Based on Single Address
        • CreateIPConfigSubnetMask Method—Creates Object Based on Subnet Address
        • DeleteIPConfig Method—Deletes Specified IP Configuration Object
        • GetAllAttributes Method—Retrieves All Attributes for Resource Partner
        • GetAllIPConfigs Method—Retrieves All IP Configuration Objects for Service Provider
        • GetAllUsers Method—Retrieves All Users Associated with Resource Partner
        • Property Method—Sets or Retrieves Resource Partner Property
        • RemoveAtrribute Method--Removes an Attribute from a WSFED Resource Partner
        • RemoveUser Method—Removes Specified User from Resource Partner
        • Save Method—Saves Resource Partner's Metadata
      • WS-Federation Resource Partner Attribute Methods
        • GetAttrNameFormat Method—Retrieves Format of Attribute Names
        • GetValue Method—Retrieves Attribute Value
    • Policy Management Operations
      • Initialize a Session
      • Create and Manage System Objects
        • Create Agent Objects
        • View and Modify Object Properties
      • Objects with Domain Scope
        • Retrieve One Object to Create Another
        • Manage an Object’s Properties
      • Objects with Domain Scope or Global Scope
      • Authorization Variables
        • Configure a Variable for a Particular Variable Type
      • Save Changes to Objects
      • Modify a Password Policy
      • Manage Password State
      • Create Responses and Response Attributes
      • Update Realms with a New Authentication Scheme
      • View Default Values for an Authentication Scheme Template
      • Create an Authentication Scheme
      • Modify the Shared Secret Rollover Policy
      • Write a Domain and Realm Report to a File
      • Disable Authentication and Authorization Event Processing
      • Manage Policy Server Load Distribution
        • Cluster Configuration
        • When All Clusters Fail
    • Command Line Interface Restrictions
    • Property References
      • SAML 2.0 Properties
      • WSFED Properties
  • Programming Guide for C
    • API Overview
      • SiteMinder SDK Overview
      • SDK Installation
      • Custom Applications and Policy Server Extensions
      • Code Samples
      • Support for Custom Code
    • Agent API
      • Agent API Overview
      • About the SiteMinder Agent
      • Agent Initialization
      • Agent Discovery
      • How to Access a Resource Using the Agent API
      • Compile and Link a Custom Agent
      • Central Host Configuration
        • Configuration Requirements
        • Code Requirements
        • Upgrade an Agent
      • Agent Call Sequence
      • Sample Custom Agent
      • Agent API Services
        • Session Services
          • Application Session Information
            • Advantages of Session Variables
            • Requirements for Using Session Variables
            • End of Session Cleanup
          • Timeouts
        • Authorization Services
          • Transaction Tracking
        • Management Services
          • Cache Commands
          • Encryption commands
        • Tunnel Services
      • Response Attributes
      • Custom Agents and Single Sign-On
        • Standard Agent Support
        • Login Through a Custom Agent
        • Login Through a Standard Agent
      • Memory Deallocation
      • Data Types and Structures
        • Sm_AgentApi_AgentDiscovery_t
        • Sm_AgentApi_Attribute_t
        • Sm_AgentApi_Init_t
        • Sm_AgentApi_ManagementContext_t
        • Sm_AgentApi_Realm_t
        • Sm_AgentApi_ResourceContext_t
        • Sm_AgentApi_Server_t
        • Sm_AgentApi_Session_t
        • Sm_AgentApi_TunnelServiceRequest_t
        • Sm_AgentApi_UserCredentials_t
      • Function Declarations
        • Function Return Codes
        • Sm_AgentApi_Audit()
        • Sm_AgentApi_Authorize()
        • Sm_AgentApi_AuthorizeDLP()
        • Sm_AgentApi_ChangePassword()
        • Sm_AgentApi_CreateSSOToken()
        • Sm_AgentApi_DecodeSSOToken()
        • Sm_AgentApi_DelSessionVariables()
        • Sm_AgentApi_DoManagement()
        • Sm_AgentApi_FreeAttributes()
        • Sm_AgentApi_FreeServers()
        • Sm_AgentApi_GetAgentApiUpdateVersion()
        • Sm_AgentApi_GetAllowedTunnelBufSize()
        • Sm_AgentApi_GetConfig()
        • Sm_AgentApi_GetMaxTunnelBufSize()
        • Sm_AgentApi_GetSessionVariables()
        • Sm_AgentApi_Init()
        • Sm_AgentApi_IsProtected()
        • Sm_AgentApi_IsProtectedDLP()
        • Sm_AgentApi_Login()
        • Sm_AgentApi_Logout()
        • Sm_AgentApi_MakeCertificateHash()
        • Sm_AgentApi_SetAgentInstanceInfo()
        • Sm_AgentApi_SetDefaultAgentId()
        • Sm_AgentApi_SetSessionVariables()
        • Sm_AgentApi_Tunnel()
        • Sm_AgentApi_UnInit()
        • Sm_AgentApi_UpdateAttributes()
    • Configuring Custom Agent Types
      • Custom Agent Type Overview
        • Agent Type Worksheet
      • Configure an Agent Type
        • Agent Type Attributes
          • Properties
          • Values
          • Configure the Agent Type Attributes Properties and Values
      • Modify an Agent Type
    • Policy Management API
      • Policy Management API Overview
        • Policy Management Setup
        • Object Retrieval Functions
        • Object Creation Functions
        • Object Deletion Functions
        • Object Associations
        • Object Identifiers
        • Directory Search Order Functions
        • Performance Enhancement
        • Memory, Cache, and Agent Key Management
        • Object Scope
      • CA SiteMinder® Federation
        • SAML Assertions
        • SAML 1.x
          • SAML 1.x Pseudo-code Example
        • SAML 2.0
          • Single Sign-on Example
          • SAML 2.0 Pseudo-code Example
          • SAML 2.0 Affiliations
          • SAML 2.0 Attribute Authority
          • SAML 2.0 Indexed Endpoints
          • Sample Application for Affiliates
        • WS-Federation
      • Policy Management API Data Structures
        • Sm_PolicyApi_Admin_t
        • Sm_PolicyApi_Affiliate_t
        • Sm_PolicyApi_AffiliateAttr_t
        • Sm_PolicyApi_AffiliateDomain_t
        • Sm_PolicyApi_Agent_t
        • Sm_PolicyApi_AgentConfig_t
        • Sm_PolicyApi_AgentType_t
        • Sm_PolicyApi_AgentTypeAttr_t
        • Sm_PolicyApi_Association_t
        • Sm_PolicyApi_AuthAzMap_t
        • Sm_PolicyApi_CertMap_t
        • Sm_PolicyApi_Domain_t
        • Sm_PolicyApi_Group_t
        • Sm_PolicyApi_HostConfig_t
        • Sm_PolicyApi_IPAddress_t
        • Sm_PolicyApi_ManagementCommand_t
        • Sm_PolicyApi_ODBCQueryScheme_t
        • Sm_PolicyApi_Oid_t
        • Sm_PolicyApi_PasswordMsgField_t
        • Sm_PolicyApi_PasswordPolicy_t
        • Sm_PolicyApi_Policy_t
          • Time Grid Array
        • Sm_PolicyApi_PolicyLink_t
        • Sm_PolicyApi_Realm_t
        • Sm_PolicyApi_RegistrationScheme_t
        • Sm_PolicyApi_RegularExpression_t
        • Sm_PolicyApi_Response_t
        • Sm_PolicyApi_ResponseAttr_t
          • Response Attribute Types
        • Sm_PolicyApi_Rule_t
        • Sm_PolicyApi_SAMLAffiliation_t
        • Sm_PolicyApi_SAMLProviderProp_t
        • Sm_PolicyApi_SAMLRequesterAttr_t
        • Sm_PolicyApi_SAMLSP_t
        • Sm_PolicyApi_SAMLSPAssertionConsumerService_t
        • Sm_PolicyApi_SAMLSPAttr_t
        • Sm_PolicyApi_Scheme_t
        • Sm_PolicyApi_SharedSecretPolicy_t
        • Sm_PolicyApi_Server_t
        • Sm_PolicyApi_TrustedHost_t
        • Sm_PolicyApi_User_t
        • Sm_PolicyApi_UserContext_t
        • Sm_PolicyApi_UserDir_t
        • Sm_PolicyApi_UserPasswordState_t
        • Sm_PolicyApi_Variable_t
          • Variable Definition
        • Sm_PolicyApi_VariableType_t
        • Sm_PolicyApi_WSFEDProviderProp_t
        • Sm_PolicyApi_WSFEDResourcePartner_t
      • Exported Types
        • Administrator Rights
        • Affiliate Attribute Types
        • Attribute Mode Types
        • Authentication and Authorization Mapping Types
        • Certificate Mapping Attribute Types
        • Certificate Mapping Directory Types
        • Certificate Mapping Flags Definitions
        • Directory Capabilities
        • Domain Flags
        • Group Types
        • IP Address Types
        • Management Commands
        • Password Messages
        • Password Message Fields
        • Password Message Field Types
        • Password Policy Behavior Flags
        • Policy Flags
        • Policy Management API Initialization Flags
        • Policy Object IDs
        • Policy Resolutions
        • Return Codes
        • SAML1x Redirect URL Types
        • SAML Assertion Consumer Service Bindings
        • SAML Attribute Name Format Identifiers
        • SAML Profiles
        • Scheme Types
        • Shared Secret Rollover Parameters
        • Structure IDs
      • Structure of a Policy Application
      • Functions by Category in the Policy Management API
        • Required Functions
        • Administrator Functions
        • Agent Functions
        • Agent Configuration Functions
        • Authentication/Authorization Map Functions
        • Authentication Scheme Functions
        • Certificate Mapping Functions
        • Domain Functions
        • Federation Functions
        • General Object Functions
        • Group Functions
        • ODBC Query Scheme Functions
        • Password Policy Functions
        • Policy Functions
        • Realm Functions
        • Registration Scheme Functions
        • Regular Expression Functions
        • Response Functions
        • Rule Functions
        • SAML1.x Configuration Functions
        • SAML 2.0 Attribute Authority Functions
        • SAML 2.0 Configuration Functions
        • SAML 2.0 Indexed Endpoint Functions
        • User Directory Functions
        • User and User State Functions
        • User Password State Functions
        • Utility Functions
        • Variable Functions
        • WS-Federation Functions
      • Function Declarations for the Policy Management API
        • Sm_PolicyApi_AddAdmin()
        • Sm_PolicyApi_AddAdminToAffiliateDomain()
        • Sm_PolicyApi_AddAdminToDomain()
        • Sm_PolicyApi_AddAffiliate()
        • Sm_PolicyApi_AddAffiliateDomain()
        • Sm_PolicyApi_AddAgent()
        • Sm_PolicyApi_AddAgentConfig()
        • Sm_PolicyApi_AddAgentConfigAssociation()
        • Sm_PolicyApi_AddAssertionConsumerServiceToSAMLSP
        • Sm_PolicyApi_AddAttributeToAffiliate()
        • Sm_PolicyApi_AddAttributeToSAMLScheme()
        • Sm_PolicyApi_AddAttributeToSAMLSP()
        • Sm_PolicyApi_AddDomain()
        • Sm_PolicyApi_AddGlobalPolicy()
        • Sm_PolicyApi_AddGlobalResponse()
        • Sm_PolicyApi_AddGlobalRule()
        • Sm_PolicyApi_AddGroup()
        • Sm_PolicyApi_AddHostConfig()
        • Sm_PolicyApi_AddMessageConsumerPluginToSAML1xScheme()
        • Sm_PolicyApi_AddOneTimeUsePropToAffiliate()
        • Sm_PolicyApi_AddPasswordPolicy()
        • Sm_PolicyApi_AddPolicy()
        • Sm_PolicyApi_AddPolicyLink()
        • Sm_PolicyApi_AddRealm()
        • Sm_PolicyApi_AddRedirectURLToSAML1xScheme()
        • Sm_PolicyApi_AddRegistrationScheme()
        • Sm_PolicyApi_AddRegularExpressionToPasswordPolicy()
        • Sm_PolicyApi_AddResponse()
        • Sm_PolicyApi_AddResponseAttr()
        • Sm_PolicyApi_AddRule()
        • Sm_PolicyApi_AddSAMLAffiliation()
        • Sm_PolicyApi_AddSAMLScheme()
        • Sm_PolicyApi_AddSAMLServiceProvider()
        • Sm_PolicyApi_AddScheme()
        • Sm_PolicyAPI_AddTargetConfigToSAML1xScheme
        • Sm_PolicyApi_AddToGroup()
        • Sm_PolicyApi_AddTrustedHost()
        • Sm_PolicyApi_AddUserDirToAffiliateDomain()
        • Sm_PolicyApi_AddUserDirToDomain()
        • Sm_PolicyApi_AddUseSecureAuthPropToAffiliate()
        • Sm_PolicyApi_AddUsersToAffiliate()
        • Sm_PolicyApi_AddUsersToPolicy()
        • Sm_PolicyApi_AddUsersToSAMLServiceProvider()
        • Sm_PolicyApi_AddUsersToWSFEDResourcePartner()
        • Sm_PolicyApi_AddVariable()
        • Sm_PolicyApi_AddWSFEDResourcePartner()
        • Sm_PolicyApi_AddWSFEDScheme()
        • Sm_PolicyApi_ConvertFromLegacyAgent()
        • Sm_PolicyApi_ConvertToLegacyAgent()
        • Sm_PolicyApi_CreateAuthAzMap()
        • Sm_PolicyApi_CreateCertMap()
        • Sm_PolicyApi_CreateODBCQueryScheme()
        • Sm_PolicyApi_CreateUserDir()
          • SM_PolicyAPI_UserDir_t Field Usage
        • Sm_PolicyApi_DeleteAdmin()
        • Sm_PolicyApi_DeleteAffiliate()
        • Sm_PolicyApi_DeleteAffiliateDomain()
        • Sm_PolicyApi_DeleteAgent()
        • Sm_PolicyApi_DeleteAgentConfig()
        • Sm_PolicyApi_DeleteAuthAzMap()
        • Sm_PolicyApi_DeleteCertMap()
        • Sm_PolicyApi_DeleteDomain()
        • Sm_PolicyApi_DeleteHostConfig()
        • Sm_PolicyApi_DeleteGroup()
        • Sm_PolicyApi_DeleteODBCQueryScheme()
        • Sm_PolicyApi_DeletePasswordPolicy()
        • Sm_PolicyApi_DeletePolicy()
        • Sm_PolicyApi_DeleteRealm()
        • Sm_PolicyApi_DeleteRegistrationScheme()
        • Sm_PolicyApi_DeleteResponse()
        • Sm_PolicyApi_DeleteRule()
        • Sm_PolicyApi_DeleteSAMLAffiliation()
        • Sm_PolicyApi_DeleteSAMLServiceProvider()
        • Sm_PolicyApi_DeleteScheme()
        • Sm_PolicyApi_DeleteTrustedHost()
        • Sm_PolicyApi_DeleteUserDir()
        • Sm_PolicyApi_DeleteVariable()
        • Sm_PolicyApi_DeleteWSFEDResourcePartner()
        • Sm_PolicyApi_DisableUser()
        • Sm_PolicyApi_EnableUser()
        • Sm_PolicyApi_FlushRealm()
        • Sm_PolicyApi_FlushUser()
        • Sm_PolicyApi_FreeMemory()
        • Sm_PolicyApi_FreeMemoryEx()
        • Sm_PolicyApi_FreeString()
        • Sm_PolicyApi_FreeStringArray()
        • Sm_PolicyApi_GetAdmin()
        • Sm_PolicyApi_GetAdminByName()
        • Sm_PolicyApi_GetAffiliate()
        • Sm_PolicyApi_GetAffiliateByName()
        • Sm_PolicyApi_GetAffiliateDomain()
        • Sm_PolicyApi_GetAffiliateDomainByName()
        • Sm_PolicyApi_GetAffiliateDomainObjects()
        • Sm_PolicyApi_GetAffiliateDomainUserDirSearchOrder()
        • Sm_PolicyApi_GetAffiliatedSAMLAuthSchemes()
        • Sm_PolicyApi_GetAffiliatedSAMLServiceProviders()
        • Sm_PolicyApi_GetAffiliateUsers()
        • Sm_PolicyApi_GetAgent()
        • Sm_PolicyApi_GetAgentByName()
        • Sm_PolicyApi_GetAgentConfig()
        • Sm_PolicyApi_GetAgentConfigByName()
        • Sm_PolicyApi_GetAgentConfigAssociations()
        • Sm_PolicyApi_GetAgentType()
        • Sm_PolicyApi_GetAgentTypeByName()
        • Sm_PolicyApi_GetAgentTypeAttr()
        • Sm_PolicyApi_GetAgentTypeAttrByName()
        • Sm_PolicyApi_GetAllAffiliateAttributes()
        • Sm_PolicyApi_GetAllAffiliates()
        • Sm_PolicyApi_GetAllSAMLAffiliations()
        • Sm_PolicyApi_GetAllSAMLSchemeAttributes()
        • Sm_PolicyApi_GetAllSAMLServiceProviders()
        • Sm_PolicyApi_GetAllSAMLSPAssertionConsumerService()
        • Sm_PolicyApi_GetAllSAMLSPAttributes()
        • Sm_PolicyApi_GetAllWSFEDResourcePartners()
        • Sm_PolicyApi_GetAuthAzMap()
        • Sm_PolicyApi_GetCertMap()
        • Sm_PolicyApi_GetChildren()
        • Sm_PolicyApi_GetDirectoryContents()
        • Sm_PolicyApi_GetDisabledUserState()
        • Sm_PolicyApi_GetDomain()
        • Sm_PolicyApi_GetDomainByName()
        • Sm_PolicyApi_GetDomainObjects()
        • Sm_PolicyApi_GetGlobalObjects()
        • Sm_PolicyApi_GetGlobalPolicyByName()
        • Sm_PolicyApi_GetGlobalResponseByName()
        • Sm_PolicyApi_GetGlobalRuleByName()
        • Sm_PolicyApi_GetGroup()
        • Sm_PolicyApi_GetGroupByName()
        • Sm_PolicyApi_GetGroupOids()
        • Sm_PolicyApi_GetHostConfig()
        • Sm_PolicyApi_GetHostConfigByName()
        • Sm_PolicyAPI_GetMessageConsumerPluginFromSAML1xScheme()
        • Sm_PolicyApi_GetODBCQueryScheme()
        • Sm_PolicyApi_GetODBCQuerySchemeByName()
        • Sm_PolicyApi_GetOneTimeUsePropFromAffiliate()
        • Sm_PolicyApi_GetPasswordMsg()
        • Sm_PolicyApi_GetPasswordPolicy()
        • Sm_PolicyApi_GetPasswordPolicyByName()
        • Sm_PolicyApi_GetPolicy()
        • Sm_PolicyApi_GetPolicyByName()
        • Sm_PolicyApi_GetPolicyLinks()
        • Sm_PolicyApi_GetPolicyUsers()
        • Sm_PolicyApi_GetRealm()
        • Sm_PolicyApi_GetRealmByName()
        • Sm_PolicyAPI_GetRedirectURLFromSAML1xScheme()
        • Sm_PolicyApi_GetRegistrationScheme()
        • Sm_PolicyApi_GetRegistrationSchemeByName()
        • Sm_PolicyApi_GetRegularExpressions()
        • Sm_PolicyApi_GetResponse()
        • Sm_PolicyApi_GetResponseByName()
        • Sm_PolicyApi_GetResponseAttrs()
        • Sm_PolicyApi_GetRule()
        • Sm_PolicyApi_GetRuleByName()
        • Sm_PolicyApi_GetSAMLAffiliation()
        • Sm_PolicyApi_GetSAMLAffiliationById()
        • Sm_PolicyApi_GetSAMLScheme()
        • Sm_PolicyApi_GetSAMLServiceProvider()
        • Sm_PolicyApi_GetSAMLServiceProviderById()
        • Sm_PolicyApi_GetSAMLServiceProviderUsers()
        • Sm_PolicyApi_GetScheme()
        • Sm_PolicyApi_GetSchemeByName()
        • Sm_PolicyApi_GetSharedSecretPolicy()
        • Sm_PolicyApi_GetTargetConfigFromSAML1xScheme
        • Sm_PolicyApi_GetTrustedHost()
        • Sm_PolicyApi_GetTrustedHostByName()
        • Sm_PolicyApi_GetUseSecureAuthPropFromAffiliate()
        • Sm_PolicyApi_GetUserContext()
        • Sm_PolicyApi_GetUserDir()
        • Sm_PolicyApi_GetUserDirByName()
        • Sm_PolicyApi_GetUserDirCapabilities()
        • Sm_PolicyApi_GetUserDirSearchOrder()
        • Sm_PolicyApi_GetUserGroups()
        • Sm_PolicyApi_GetUserPasswordState()
        • Sm_PolicyApi_GetUsersFromWSFEDResourcePartner()
        • Sm_PolicyApi_GetVariable()
        • Sm_PolicyApi_GetVariableByName()
        • Sm_PolicyApi_GetVariableType()
        • Sm_PolicyApi_GetVariableTypeByName()
        • Sm_PolicyApi_GetWSFEDResourcePartner()
        • Sm_PolicyApi_GetWSFEDScheme()
        • Sm_PolicyApi_Init()
        • Sm_PolicyApi_InitEx()
        • Sm_PolicyApi_IsGroup()
        • Sm_PolicyApi_Login()
        • Sm_PolicyApi_Logout()
        • Sm_PolicyApi_LookupDirectoryEntry()
          • Search Expression Grammar for an LDAP Namespace
          • Search Expression Grammar for ODBC, WinNT and Custom Namespaces
        • Sm_PolicyApi_ManagementCommand()
        • Sm_PolicyApi_Release()
        • Sm_PolicyApi_RemoveAdminFromAffiliateDomain()
        • Sm_PolicyApi_RemoveAdminFromDomain()
        • Sm_PolicyApi_RemoveAgentConfigAssociation()
        • Sm_PolicyApi_RemoveAssertionConsumerServiceFromSAMLSP()
        • Sm_PolicyApi_RemoveAttributeFromAffiliate()
        • Sm_PolicyApi_RemoveAttributeFromSAMLScheme()
        • Sm_PolicyApi_RemoveAttributeFromSAMLSP()
        • Sm_PolicyApi_RemoveFromGroup()
        • Sm_PolicyApi_RemovePolicyLinkFromPolicy()
        • Sm_PolicyApi_RemoveRegularExpressionFromPasswordPolicy()
        • Sm_PolicyApi_RemoveResponseAttr()
        • Sm_PolicyApi_RemoveUserDirFromAffiliateDomain()
        • Sm_PolicyApi_RemoveUserDirFromDomain()
        • Sm_PolicyApi_RemoveUsersFromAffiliate()
        • Sm_PolicyApi_RemoveUsersFromPolicy()
        • Sm_PolicyApi_RemoveUsersFromSAMLServiceProvider()
        • Sm_PolicyApi_RemoveUsersFromWSFEDResourcePartner()
        • Sm_PolicyApi_RenameObject()
        • Sm_PolicyApi_SetAffiliateDomainUserDirSearchOrder()
        • Sm_PolicyApi_SetDisabledUserState()
        • Sm_PolicyApi_SetPassword()
        • Sm_PolicyApi_SetResponseInPolicyLink()
        • Sm_PolicyApi_SetSharedSecretPolicy()
        • Sm_PolicyApi_SetUserDirSearchOrder()
        • Sm_PolicyApi_SetUserPasswordState()
        • Sm_PolicyApi_ValidateDirectoryEntry()
      • Authentication Scheme Configuration
        • Anonymous Template
        • Basic Over SSL Template
        • Basic Template
        • Custom Template
        • HTML Form Template
        • Impersonation Template
        • RADIUS CHAP/PAP Template
        • RADIUS Server Template
        • SafeWord HTML Form Template
        • SafeWord Template
        • SAML Artifact Template
        • SAML POST Template
        • SAML 2.0 Template
        • SecurID HTML Form Template
        • SecurID Template
        • smauthetsso authentication scheme
        • TeleID Template
        • Windows Authentication Template
        • WS-Federation Template
        • X.509 Client Cert and Basic Template
        • X.509 Client Cert and Form Template
        • X.509 Client Cert or Basic Template
        • X.509 Client Cert or Form Template
        • X.509 Client Cert Template
    • Customizing the Policy Server
      • Work with Authentication and Authorization APIs
        • Authentication Hook
        • Authorization Hook
        • Custom Data Hook
        • SiteMinder Events
          • Authentication Events
          • Authorization Events
        • Saving Data Between Module Invocations
        • Well-known User Attributes
        • Retrieving a Password
      • Integration with the Web Agent
    • Context Structures
      • Sm_Api_AppSpecificContext_t
      • Sm_Api_Context_t
      • Sm_Api_RequestContext_t
      • Sm_Api_TunnelContext_t
      • Sm_Api_UserContext_t
        • Multi-Valued Attributes in LDAP
      • Sm_AuthApi_UserCredentials_t
    • Authentication API
      • Authentication API Overview
        • Install an Authentication Scheme Library
        • Load an Authentication Scheme
        • User Context
        • Authentication Events
        • Redirection
        • Supported Credentials
      • Create a Custom Authentication Scheme Library
        • SmAuthenticate()
        • SmAuthInit()
        • SmAuthQuery()
        • SmAuthRelease()
    • Authorization API
      • Authorization API Overview
        • Include File
      • Active Expressions
        • How SiteMinder Interprets Active Expressions
        • Define Active Rules
        • Define Active Responses
        • Define Active Policies
        • Pass HTTP Headers and Cookies to Policy Server
      • Authorization Function Declarations
        • User-Defined Function
        • SmQueryVersion()
      • Active Expression Examples
        • Example of an Active Rule
        • Example of an Active Response
    • Tunnel Service API
      • Tunnel Service API Overview
      • Develop a Custom Tunnel Service
        • Include File
        • Function Summary
        • SmQueryVersion()
        • SmTunnelInit()
        • SmTunnelRelease()
        • User-Defined Function
    • Event API
      • Event API Overview
      • Event API Setup
      • Event Provider Structures
        • SmLog_Access_t
        • SmLog_EMS_t
        • SmLog_Obj_t
        • SmLog_System_t
      • Overview of Event Types
        • Access Event Type
          • Filter Access Events
        • EMS Event Type
          • Logging Workflow Events
        • Object Event Type
          • Authentication Events
          • Management Command Events
        • System Event Type
        • SmLogAccessEvent_AuthAccept
        • SmLogAccessEvent_AuthReject
        • SmLogAccessEvent_AuthAttempt
        • SmLogAccessEvent_AuthChallenge
        • SmLogAccessEvent_AzAccept
        • SmLogAccessEvent_AzReject
        • SmLogAccessEvent_AdminLogin
        • SmLogAccessEvent_AdminLogout
        • SmLogAccessEvent_AdminReject
        • SmLogAccessEvent_AuthLogout
        • SmLogAccessEvent_ValidateAccept
        • SmLogAccessEvent_ValidateReject
        • SmLogEmsEvent_CreateUser, SmLogEmsEvent_DeleteUser, SmLogEmsEvent_ModifyUser
        • SmLogEmsEvent_PasswordModify
        • SmLogEmsEvent_AssignUserRole, SmLogEmsEvent_RemoveUserRole
        • SmLogEmsEvent_EnableUser, SmLogEmsEvent_DisableUser
        • SmLogEmsEvent_CreateOrg, SmLogEmsEvent_DeleteOrg, SmLogEmsEvent_ModifyOrg
        • SmLogEmsEvent_CreateRole, SmLogEmsEvent_DeleteRole, SmLogEmsEvent_ModifyRole
        • SmLogEmsEvent_CreateObject, SmLogEmsEvent_DeleteObject, SmLogEmsEvent_ModifyObject
        • SmLogEmsEvent_Login, SmLogEmsEvent_Logout
        • SmLogEmsEvent_AuthFail
        • SmLogEmsEvent_SessionTimeout
        • SmLogObjEvent_Create
        • SmLogObjEvent_Update
        • SmLogObjEvent_Delete
        • SmLogObjEvent_Login
        • SmLogObjEvent_FailedLoginAttemptsCount
        • SmLogObjEvent_Logout
        • SmLogObjEvent_LoginReject
        • SmLogObjEvent_FlushAll
        • SmLogObjEvent_FlushUser
        • SmLogObjEvent_FlushUsers
        • SmLogObjEvent_FlushRealms
        • SmLogObjEvent_ChangeDynamicKeys
        • SmLogObjEvent_ChangePersistentKey
        • SmLogObjEvent_ChangeSessionKey
        • SmLogObjEvent_ChangeUserPassword
        • SmLogObjEvent_CreateUserSuccess
        • SmLogObjEvent_DeleteUserSuccess
        • SmLogObjEvent_ChangeDisabledUserState
        • SmLogObjEvent_ModifyUserSuccess
        • SmLogObjEvent_CreateUserFail
        • SmLogObjEvent_DeleteUserFail
        • SmLogObjEvent_ModifyUserFail
        • SmLogSystemEvent_ServerInit
        • SmLogSystemEvent_ServerInitFail
        • SmLogSystemEvent_ServerUp
        • SmLogSystemEvent_ServerDown
        • SmLogSystemEvent_LogFileOpenFail
        • SmLogSystemEvent_ServerHeartbeat
        • SmLogSystemEvent_AgentInfo
        • SmLogSystemEvent_AgentConnectionStart
        • SmLogSystemEvent_AgentConnectionFail
        • SmLogSystemEvent_AgentConnectionEnd
        • SmLogSystemEvent_DbConnect
        • SmLogSystemEvent_DbConnectFail
        • SmLogSystemEvent_LdapConnect
        • SmLogSystemEvent_LdapConnectFail
        • SmLogSystemEvent_AmbiguousResourceMatch
        • SmLogSystemEvent_AmbiguousRadiusMatch
        • SmLogSystemEvent_AgentHeartbeat
      • Event Function Declarations
        • SmEventInit()
        • SmEventRecord()
        • SmEventRelease()
      • Example of an Active Policy
      • Configuring the Policy Server for the Event Handler
    • DMS Workflow API
      • DMS Workflow API Overview
        • DMS Sessions
        • DMS Workflow
        • Workflow Events
        • Preprocess Events
        • Postprocess Events
      • Write and Define a DMS Workflow
        • Sm_Api_DmsContext_t
        • Sm_DmsWorkflow_Attribute_t
        • SmDmsWorkflowInit()
        • SmDmsWorkflowPostprocess()
        • SmDmsWorkflowPreprocess()
        • SmDmsWorkflowRelease()
    • Directory API
      • Purpose of the Directory API
      • Before You Use the Directory API
      • How to Use the Directory API
        • Build a Directory Application
        • Exported Enumerations
        • General Data Types and Structures
        • Initialization and Release Functions
        • Utility Functions
        • Operations on the Directory
        • Operations on a Directory Entry (User)
      • Sequence of Function Calls
        • SmDirAddEntry()
        • SmDirAddMemberToGroup()
        • SmDirAddMemberToRole()
        • SmDirAuthenticateUser()
        • SmDirChangeUserPassword()
        • SmDirEnumerate()
        • SmDirFreeString()
        • SmDirFreeStringArray()
        • SmDirGetDirConnection()
        • SmDirGetDirObjInfo()
        • SmDirGetGroupMembers()
        • SmDirGetLastErrMsg()
        • SmDirGetRoleMembers()
        • SmDirGetUserAttr()
        • SmDirGetUserAttrMulti()
        • SmDirGetUserClasses()
        • SmDirGetUserDisabledState()
        • SmDirGetUserGroups()
        • SmDirGetUserProperties()
        • SmDirGetUserRoles()
        • SmDirInit()
        • SmDirInitDirInstance()
        • SmDirInitUserInstance()
        • SmDirLookup()
        • SmDirQueryVersion()
        • SmDirRelease()
        • SmDirReleaseInstance()
        • SmDirRemoveEntry()
        • SmDirRemoveMemberFromGroup()
        • SmDirRemoveMemberFromRole()
        • SmDirSearch()
        • SmDirSearchCount()
        • SmDirSetUserAttr()
        • SmDirSetUserAttrMulti()
        • SmDirSetUserDisabledState()
        • SmDirValidateInstance()
        • SmDirValidateUserDN()
        • SmDirValidateUsername()
        • SmDirValidateUserPolicyRelationship()
      • Structures Used in the Sample Directory Application
        • Directory Instance Handle
        • Directory Provider Handle
        • Directory Entry (User) Instance Handle
        • How To Distinguish between Handle Types
    • Common Data Types and Structure
      • Exported Enumerations
        • Sm_Api_DisabledReason_t
        • Sm_Api_Reason_t
        • Sm_PolicyResolution_t
      • Common Structure
    • Event Log Formats
      • Access Events
        • Authentication and Authorization Format
        • Administration Format
      • Object Events
        • AdminChange Format
        • Management Command Format
      • EMS Events
        • EMS Log Format
    • SAML 2.0 Property Reference
      • About the SAML 2.0 Properties
      • Property Reference
  • Programming Guide for Java
    • Legal Notices
    • CA Technologies Product References
    • Contact CA Technologies
    • Java API Overview
      • Purpose of the Java APIs
      • Installation Path
      • Code Samples
      • Policy Server Prerequisite
      • Java Components of the SiteMinder SDK
      • Java Agent API
      • Policy Management API
      • Authentication API
      • Authorization API
      • Delegated Management Services API
      • Utilities Package
      • How Java Components Fit Together
      • Network Architecture
      • Java API Flow
        • Establish a Connection to the Policy Server
          • Establish a Default Connection
          • Establish a User-Defined Connection to the Policy Server
        • Obtain a Session
          • Log in as a SiteMinder Administrator
        • Agent Discovery
          • Enable Agent Discovery
        • Make API Requests and Handle Results
      • Log Trace Information
      • Javadoc Reference
      • Support for Custom Code
    • Utilities Package
      • Purpose of the Utilities Package
      • Classes for Internal Use
      • Connection Class
      • Session Class
      • Result Class
        • Interpret a Result Object
        • Core Methods in the Result Class
      • Exception Class
      • Property Class
    • Agent API
      • SiteMinder Agents
      • Agent Type
      • Agent API Class Hierarchy
      • Implement the JNI Java Agent API
      • Implement the Pure Java Agent API
        • Pure Java Agent API Usage
        • Enable Pure Java Agent API Tracing
      • Connection to a Policy Server
      • User Access to Resources
      • How Web Agents Use the Agent API
      • Java Agent API Services
      • Session Services
        • Session Creation and the Session Specification
        • Session Validation
        • Session Delegation
        • Session Termination
      • Authorization Services
      • Auditing Services and Transaction Tracking
      • Management Services
        • Cache Commands
        • Encryption Commands
      • Tunnel Services
      • Response Attributes
      • Single Sign-on
        • Log on through a Custom Agent
        • Log on through a Standard Agent
        • Standard Agent Support
        • How Information Is Bound to a Session
        • Advantages of Session Variables
        • Requirements for Using Session Variables
        • End of Session Cleanup
      • Server Clusters
        • Clustered and Non-Clustered Servers
        • Cluster Configuration
        • Cluster Failover
          • When All Clusters Fail
          • Version Compatibility and Failover Behavior
      • Timeouts
    • Policy Management API
      • About Policy Management
      • Policy Management Setup
      • Required JAR File
      • Policy Store Objects
      • Write a Policy Management Application
        • Establish a Connection to the Policy Server
        • Obtain a Session Object
        • Pass in the Session Object
        • Make Policy Management API Requests
        • Terminate the Administrator Session
      • Administrator Methods
      • Agent Methods
      • Agent Configuration Object Methods
      • Authentication and Authorization Map Methods
      • Authentication Scheme Methods
      • Certificate Map Methods
      • Domain Methods
      • General Object Methods
      • Group Methods
      • Host Configuration Object Methods
      • ODBC Query Scheme Methods
      • Password Policy Methods
      • Policy Methods
      • Realm Methods
      • Response Methods
      • Root Configuration Methods
      • Rule Methods
      • Self-Registration Methods
      • Trusted Host Object Methods
      • User Directory Methods
      • User Policy Methods
      • Utility Methods
      • Object Associations
      • Add Objects to the Policy Store
      • Retrieve Objects from the Policy Store
      • Delete Objects from the Policy Store
      • Authentication Scheme Configuration
        • Anonymous Template
        • Anonymous Template
        • Basic Over SSL Template
        • Custom Template
        • HTML Form Template
        • Impersonation Template
        • RADIUS CHAP/PAP Template
        • RADIUS Server Template
        • SafeWord HTML Form Template
        • SafeWord Template
        • SAML Artifact Template
        • SecurID HTML Form Template
        • SecurID Template
        • smauthetsso Authentication Scheme
        • TeleID Template
        • Windows Authentication Template
        • X.509 Client Cert and Basic Template
        • X.509 Client Cert and Form Template
        • X.509 Client Cert or Basic Template
        • X.509 Client Cert or Form Template
        • X.509 Client Cert Template
      • Performance Consideration
    • Authentication and Authorization APIs
      • Configuration of All Custom Classes
      • Custom Classes for Authentication and Authorization
      • Required Library File
      • Shared Information
      • Common Classes
      • Create a Custom Authentication Scheme
        • Classes and Interfaces in the Authentication API
          • SmAuthScheme Methods
          • Other Classes in the Authentication API
        • How SiteMinder Loads a Custom Authentication Scheme in Java
        • How SiteMinder Initializes Authentication Processing
          • Authentication of User Credentials
        • Supported Credentials
        • User Disambiguation and Authentication
          • User Disambiguation
          • User Authentication
        • Redirection
        • Authentication Events
        • Extend the SAML and WS-Federation Authentication Schemes
          • The Role of the MessageConsumerPlugin
      • Use the Authorization API
        • Active Expressions
          • Execute an Active Expression
          • Interpret an Active Expression Result
        • ActiveExpression Methods
        • Other Classes in the Authorization API
        • Modify a SAML Assertion or Response
          • Interaction between SiteMinder and an Assertion Generator
          • Development and Deployment Notes
    • Customizing a SAML Assertion
      • Implement the Java Assertion Generator Plug-in Interface
      • Deploy the Assertion Generator Plug-in
      • Configure the Assertion Generator Plug-in in the UI
    • Delegated Management Services API
      • About the DMS API
      • The Required JAR File
      • SiteMinder User Directories
        • SiteMinder User Directory Containers
      • Attribute-based Delegation
        • Configure Attribute-based Delegation
      • DMS Users
      • Implementation Class
      • Context Class
      • Object Class
        • Object Model
      • Search Class
      • Cursor Class
        • Searches that Support Cursor Operations
        • Searches of Microsoft LDAP Directories
      • Write a Directory Management Application
        • DMS Context
        • Directory Context
        • Change the User Type in DMS Context
        • Create an Object
        • Get Directory Entry Attributes
        • Add an Object to a Directory
        • Add a User to a Group
        • Add a User to a Role
        • Get, Modify, or Delete an Object
      • Searches
        • Set Search Parameters When Creating the Search Object
        • Set Search Parameters After Creating the Search Object
        • Set the Search Filter
          • Set the Search Filter for LDAP Directories
          • Set the Search Filter for ODBC Directories
        • Search an Organization
        • Examples of a Search
      • User Password State
      • ODBC Support
      • Restricted Methods
  • Programming Guide for the Federation .NET SDK
    • Overview of the CA SiteMinder® Federation .NET SDK
      • Architecture of the .NET SDK
      • Programming Prerequisites
    • Installation of the .NET SDK
      • Install the .NET SDK on Windows
      • Uninstall the .NET SDK on Windows
    • .NET SDK Components
      • Open Format Cookie
      • IFederationOpenIdentity Interface
      • Identity Factory
      • IFedIdentitySDKLogger Interface
    • Using the .NET SDK
      • Program Flow at the Asserting Party
      • Program Flow at the Relying Party
      • CA SiteMinder® Federation .NET SDK Logging
      • Programming Examples
      • .NET SDK Sample Application
  • Programming Guide for the Federation Java SDK
    • Overview of the CA SiteMinder® Federation Java SDK
      • Java SDK Functionality
      • Java SDK Files
    • Installation of the Java SDK
      • Install the Java SDK on Windows Systems
      • Install the Java SDK on UNIX Systems
    • CA SiteMinder® Federation Java SDK Programming Interfaces
      • IFederationOpenIdentity Interface
        • Open Format Cookie
      • FedSdkLogger Interface
    • Using the CA SiteMinder® Federation Java SDK
      • Program Flow at the Relying Party Using the Open Format Cookie
      • Delegated Authentication Using the Open Format Cookie
      • CA SiteMinder® Federation Java SDK Logging
      • Java SDK Sample Application Overview
      • Java SDK Sample Application Deployment
      • Java SDK Sample Application Execution
      • Java SDK Sample Application Customization
      • Customizing a SAML Assertion
        • Implement the Java Assertion Generator Plug-in Interface
        • Deploy the Assertion Generator Plug-in
        • Configure the Assertion Generator Plug-in in the UI
  • CA SiteMinder® Web Services Security Programming Guide for Java
    • CA SiteMinder® Web Services Security SDK Overview
      • Introduction
        • Support for Custom Code
        • CA Software Prerequisites
      • Web Service Client API
      • XML Agent Content Helper API
        • What Is an XML-Enabled Agent?
        • XML Agent Content Helper API Services
      • CA SiteMinder® Web Services Security SDK Contents
        • Installed Directory Structure
        • SDK Samples
      • CA SiteMinder® Web Services Security SDK API Reference Material
        • Javadoc Reference
          • Javadoc Version Information
    • Using the Web Service Client API
      • Web Service Client API Members
      • How to Implement an Application Using the Web Service Client API
      • Sample Web Service Client API Java Application
        • Set Up and Start the Sample Web Service Client Application
          • Perform Initial Setup
          • Configure Values to be Used in the Sample Application
          • Run the Sample Application
        • Source Code Location
    • Use the Java XML Agent Content Helper API
      • Overview
      • Interfaces and Classes in the Java XML Agent Content Helper API
      • Implement the Java XML Agent Content Helper API
        • Code an XML-Enabled Java Agent
        • Before You Compile an XML-Enabled Agent
        • Compile an XML-Enabled Java Agent
        • Deploy an XML-Enabled Java Agent
      • Java XML-Enabled Agent Functional Flow
        • Force the JVM to use Xerces Parser
        • Initialize the CA SiteMinder Agent API
        • CA SiteMinder Agent API Required Code Block
        • Initialize the XML Agent Content Helper API
        • Steps Required for Resource Access
        • Uninitialize the APIs
      • Platform Support and Installation Media
        • Locate the Platform Support Matrix
        • Locate the Bookshelf
        • Locate the Installation Media
• Advanced Password Services (APS) Guide
  • Introduction
    • Advanced Password Services
      • Change My Password (SmCPW)
      • Checking at Authentication (SmAPS)
      • Help Desk Support (APSAdmin)
      • Forgotten Password Services (FPS)
      • Application Programming Interface (APSAPI)
      • Interfaces for Delegated Management Services (DMS2)
    • SiteMinder (Basic) Password Services & Advanced Password Services
  • Installation & Configuration
    • Preparation & Prerequisites
    • Installation
      • SiteMinder Policy Server
        • Windows
        • UNIX
      • Web Server – Change Password Interface
        • Windows
        • UNIX
      • Web Server – Forgotten Password Interface
        • Windows
        • UNIX
      • Web Server – Help Desk (APSAdmin) Interface
        • Windows
        • UNIX
      • Delegated Management Services (DMS2) Interface
        • APS Attributes/Enable/Disable (all platforms)
        • Forgotten Password Questions/Answers (all platforms)
    • Schema Changes
      • ObjectClasses
      • User Entries
    • LDAP Updates
    • ODBC Queries
    • Other User Directory Changes
    • Configuration
      • Change Password Interface (SmCPW)
        • Setup
        • Custom Forms
        • Customizing the Form
      • Forgot (Forgotten Password User Interface Stub)
        • User Presentation Forms
      • APSAdmin (Help Desk Interface Stub)
    • Policy Database Configuration
      • User Directory Credentials
      • Change Password Page Configuration
      • Forgotten Password Configuration
      • Help Desk Interface Configuration
      • Event Handling
        • Realms
        • Rules
        • Rule Groups
        • Responses
        • Policies
      • Authentication Scheme
  • APS Configuration File (APS.CFG)
    • Overview
    • Format
    • Define Macros
      • External Macro File
    • Setting Overrides
      • User Classes
      • Context Macros
      • A note about "Old Style" overrides
      • Performance
      • Testing Expressions
    • File Sections
    • Settings That Can Appear Anywhere
      • Define
        • Use External Macros
        • @<classname>
    • General Settings
      • Trace
        • Timeout
        • Poll
      • LDAP Write Back Information
        • LDAP Writeback Server
        • LDAP Writeback DN
        • LDAP Writeback Password
        • LDAP Writeback Use SSL
      • Other LDAP Settings
        • LDAP Disabled Groups
        • LDAP Blob
        • Check LDAP Password Existence
        • LDAP Password Attribute
        • Use Internal Disables
        • Ignore
        • Disable
    • Password Content Settings
      • Password Length
        • Minimum Length
        • Maximum Length
      • Required Content
        • Minimum Letters
        • Minimum Uppercase
        • Minimum Lowercase
        • Minimum Digits
        • Minimum Alphanumeric
        • Minimum Punctuation
        • Minimum Symbols
        • Minimum Other
      • Combinations of Character Types
        • Combination Letters
        • Combination Uppercase
        • Combination Lowercase
        • Combination Digits
        • Combination Alphanumeric
        • Combination Punctuation
        • Combination Symbols
        • Combination Other
        • Minimum Combinations
      • Other Content Requirements
        • Maximum Repeat
        • Complexity
        • Force Case
        • Match
        • NoMatch
        • Allowed Characters
        • Disallowed Characters
    • Password Reuse
      • Reuse Count
        • Reuse Delay
    • Change Required
      • Percentage
        • Percentage Sequencing
    • Restricting Words from the User's Profile
      • Attribute Match Maximum
        • Parse Attributes
        • Exclude Attributes
    • Run-time Password Checking
      • Auto Force Change
        • Reset FPS Lockout
      • Failure Tracking
        • Max Failures
        • Max Failures On Change
        • Failure Count Timeout
        • Auto Reset Failure Count
        • Failure Count Retention
        • How to Configure a Separate Maximum Failure Counter and Threshold for OTP Authentication
          • Obtain the OID of Realms Protected Configured for OTP Authentication
          • Configure Required Parameters in the APS.cfg File
            • Configure the Max Failures Parameter
            • Configure the Override Max Failure for Realm OIDs Parameter
            • Configure the Realm Based Max Failures Parameter
          • Verify That Attempt Failure Thresholds for OTP and Other Authentication Do Not Aggregate to Lock Out Users
      • Expiring Password
        • Password Expiration
        • Expiration Warning
        • Offline Expiration Warning
        • Expiration Grace
        • Grace Logins
      • Account Expiration & Purge
        • Max Inactivity
        • Inactivity Warning
        • Purge After
    • Event Redirection
      • Active Expression Parameters
        • SmCPW
        • Failure Redirect
        • Disable Redirect
        • Inactive Redirect
        • Expired Redirect
        • Force Change Redirect
        • Warning Redirect
        • Expire Change Redirect
    • Generational & Other Automatic Redirection
      • Generational Redirect
        • Message of the Day
        • Always Redirect
        • Always Redirect AZ
    • Sending Mail
      • Disabled User Mail
        • Max Failures Mail
        • Ongoing Failures Mail
        • Inactive User Mail
        • Expired Password Mail
        • Force Change Mail
        • Password Warning Mail
        • Inactivity Warning Mail
        • Inactivity Disabled Mail
        • Change Confirmation Mail
    • Mail Settings
      • [Mail]
        • Server
        • Log Path
        • Directory
    • Custom Logging
      • [Logging]
    • Custom Extensions
      • [Custom]
    • Invalid Password Dictionary
      • [Dictionary]
    • Password Complexity
      • [Complexity]
        • Sorted
        • Case Switch
        • Length
        • Character Values
    • Field Mappings
      • Attribute Mapping
      • Attribute Suppression
      • Renaming LDAP Groups
      • LDAP Reverse Groups
    • ODBC Queries
      • [ODBC]
        • Replace Quote With
        • Test Handle
        • Enumerate
        • Get Object Info
        • Lookup
        • Init User
        • Authenticate User
        • Get User Property
        • Set User Property
        • Get User Properties
        • User Properties
        • Lookup User
        • Get User Groups
        • Is Group Member
        • Set Password
        • Get Login History
        • Set Login History
        • Delete Login History
        • Clear Login History
        • Get FPS Log
        • Add FPS Log
        • Clear FPS Log
        • Set Password Checksum
        • Test Password Checksum
        • Compare FPS Answer
        • Add To Group
        • Remove From Group
        • Admin Translation
    • APSExpire
      • LDAP Directories
      • ODBC Directories
    • General FPS Settings
      • Audit Log
        • Directory
        • Allowed
    • FPS LDAP Settings
    • FPS Identify Process
      • [FPS-Identify]
      • Collecting Identification Information
        • URL
        • Missing URL
        • Multiple URL
      • Error Cases
        • Not Found URL
        • Disabled URL
        • Disabled Mail
      • Form Processing
        • Required
        • Optional
        • Lookup
      • Controlling Frequency of Use
        • Max Success Frequency
        • Too Recently Used URL
        • Too Recently Used Mail
        • Max Attempts Frequency
        • Too Recently Attempted URL
        • Too Recently Attempted Mail
      • Preventing Attacks
        • Lockout Count
        • Lockout URL
        • Lockout Mail
        • Lockout Timer
      • FPS Verify Process
        • [FPS-Verify]
      • Forms
        • URL
        • Missing URL
        • Retry URL
      • Error Conditions
        • Invalid URL
        • Invalid Mail
        • No Data URL
        • No Data Mail
        • Timeout URL
      • Form Handling
        • Required
        • Optional
        • Lookup
        • Initial
        • ODBC Encrypt
        • Timer
    • FPS Change Password Process
      • [FPS-Change]
        • URL
        • Timeout URL
        • Timeout
    • FPS Confirm Process
      • [FPS-Confirm]
        • URL
        • Mail
        • Initial
        • Force Change
        • New Password Length
        • Timeout
        • Allowed Characters
        • Disallowed Characters
        • Force Case
        • Minimum Length
        • Maximum Length
        • Minimum Length
        • Minimum Lower Case
        • Minimum Letters
        • Minimum Digits
        • Minimum Alphanumeric
        • Minimum Punctuation
        • Minimum Symbols
        • Minimum Other
        • Maximum Repeat
    • FPS Errors
      • [FPS-Errors]
        • URL
        • Mail
    • Handling FPS Mail Errors
      • [FPS-No Mail]
        • URL
        • Mail
  • User Directories: Schema, Storage and Capabilities
    • Schema & Storage
      • Date Format
      • Attribute/Column Names
        • smapsAccountInactivityDays
        • smapsBaseDate
        • smapsDisableAfter
        • smapsDisableUntil
        • smapsExpirePasswordDays
        • smapsFailureCount
        • smapsFailuresSinceLastLogin
        • smapsFailuresSincePreviousLogin
        • smapsGenerationalRedirects
        • smapsGraceLoginsUsed
        • smapsHistory
        • smapsImmediateChange
        • smapsInactivityWarning
        • smapsLastLogin
        • smapsLastPasswordChange
        • smapsLoginHistory
        • smapsMaxFailures
        • smapsMustLoginBy
        • smapsNextAction
        • smapsOldBlob
        • smapsPassword
        • smapsPreviousLogin
        • smapsTotalFailures
        • smapsTotalLogins
        • smfpsLockoutCounter
        • smfpsLog
        • smfpsOneShot
    • Forgotten Password Services (FPS) Data
    • LDAP Directories
      • Schema Updates
        • To use 56NetegrityAPS.ldif on iPlanet LDAP Directories Only:
      • Special Setup
      • Native Password Policy Support
      • Disabling/Enabling User Accounts
        • Recognizing a Disabled User
        • Disabling a User
        • Enabling a User Account
      • Special APS Processing/Limitations
        • LDAP Reverse Groups
        • Forgotten Password Services (FPS)
        • APSExpire
        • APSAdmin
      • Fault Tolerance & Performance
      • Known Directory Idiosyncrasies
    • Microsoft Active Directories
      • Schema Updates
      • Special Setup
      • Native Password Policy Support
      • Disabling/Enabling User Accounts
        • Recognizing a Disabled User
        • Disabling a User
        • Enabling a User Account
      • Special APS Processing/Limitations
        • LDAP Reverse Groups
        • Forgotten Password Services (FPS)
        • APSExpire
        • APSAdmin
      • Fault Tolerance & Performance
      • Known Directory Idiosyncrasies
    • Microsoft Windows Domains
      • Schema Updates
      • Special Setup
      • Native Password Policy Support
      • Disabling/Enabling User Accounts
        • Recognizing a Disabled Account
        • Disabling a User Account
        • Enabling a User Account
      • Special APS Processing/Limitations
        • Forgotten Password Services (FPS)
        • APSExpire
        • APSAdmin
      • Fault Tolerance & Performance
      • Known Directory Idiosyncrasies
    • ODBC (RDBMS) Directories
      • Schema Updates
        • Attribute Length
        • Native Data Formats
        • Number of Rows
      • Special Setup (Queries)
        • Enumerate
        • Get Object Info
        • Lookup
        • Init User
        • Authenticate User
        • Get User Property
        • Set User Property
        • Get User Properties
        • User Properties
        • Lookup User
        • Get User Groups
        • Is Group Member
        • Set Password
        • Get Login History
        • Set Login History
        • Delete Login History
        • Clear Login History
        • Get FPS Log
        • Add FPS Log
        • Clear FPS Log
        • Set Password Checksum
        • Test Password Checksum
        • Compare FPS Answer
        • Add To Group
        • Remove From Group
        • Admin Translation
      • Disabling/Enabling User Account
        • Recognizing a Disabled Account
        • Disabling a User Account
        • Enabling a User Account
      • Special APS Processing/Limitations
        • Forgotten Password Services (FPS)
        • APSExpire
        • APSAdmin
      • Fault Tolerance & Performance
      • Known Directory Idiosyncrasies
    • Password Replication/Synchronization
  • Administration and Operations
    • Introduction
    • APS Processing during User Authentication
    • Password Lifetime
    • Backup Policy Servers
    • Special Case: Three Strikes, You're Out
    • SiteMinder's [Basic] Password Services
    • Using Persistent Cookies
      • Account Expiration
      • Account Inactivity Warning
      • Password Expiration Warnings
      • True password expiration
    • Authorization Mapping and AZRedirect
    • FPS Process Flow
  • Change Password Interface (SmCPW)
    • Change Password Forms
      • Customization without Custom Forms
      • Handling Errors
    • Query String Options
    • Setup
  • Help Desk Interface (APSAdmin)
    • User Selection
      • Customization Options
        • Restricting the Directory or Directory Type
        • Making the User Display Read Only
        • Showing a Help Button
        • Showing a Cancel Button
        • Suppressing the Reset Button
        • Changing the Prompts
        • Customizing the Look and Feel
        • Suppressing the User Selection Panel Altogether
    • User Display
      • Customization Options
        • Making the User Display Read Only
        • Showing a Help Button
        • Showing a Cancel Button
        • Showing a Close Button
        • Suppressing the Reset Button
        • Changing the Prompts
        • Customizing the Look and Feel
        • Changing the Graphics
    • User Update
    • Specifying Form Content and Access Control
      • Access Control
      • User Directory "Portability"
        • Groups
      • Specifying Attributes/Columns
      • Specifying Groups
      • Grouping into Sections
      • Prompts
        • Translating Prompts
        • Null Sections
      • Varying Content by User
      • Varying Content by Context
      • Using Self()
      • Validating Password Resets
      • Forcing Password Changes
      • Disabling, Enabling & Redisabling
      • Special Field & Group Handling
      • Other Field & Group Handling
    • Running APSAdmin from the Command Line
      • Security Note
  • Daily Processing (APSExpire)
    • APSExpire
    • APSExpire Event Log
    • Event Processing
    • Command Line Parameters
    • Performance Adjustments/Job Definitions
      • LDAP Directories
      • ODBC Directories
      • Performance
  • Forgotten Password (FPS) Interface (Forgot)
    • Programming Notes
    • Initial Invocation
    • Identify Pages
      • URL
      • Missing URL
      • Multiple URL
      • Not Found URL
      • Disabled URL
      • Too Recently Used URL
      • Too Recently Attempted URL
      • Lockout URL
    • Verify Forms
      • URL
      • Missing URL
      • Retry URL
      • Invalid URL
      • No Data URL
      • Timeout URL
    • Change Pages
      • URL
      • Timeout URL
    • Confirm Pages
    • Error Pages
    • Mail Error Pages
  • Application Programming Interface
    • Compiling & Linking
    • Run-Time Requirements
    • Function Descriptions
      • IsPasswordValid
      • IsMyPasswordValid
      • IsMyPasswordValid2
      • ChangeMyPassword
      • ChangeMyPassword2
      • Authenticate
      • APSAdminGetDirectory
      • APSAdminRead
      • APSAdminWrite
  • Authentication Scheme
    • Configuring as a Wedge
    • Configuring for FPS
  • Custom Logging Extension (SmAPSLog)
  • Custom Extensions (SmAPSEx)
  • Utilities
    • APSComplexity - Calculate Password Complexity
    • APSTestSettings - Check APS Configuration
      • Command Line Options
    • APSEncrypt - Encrypt an Administrator Password
    • APSMailTest - Test Email Settings
    • APSPing - Test connectivity
    • APSVersion - Display Module Version Numbers
    • APSXlateTest - Test Translation Settings
    • SmCPW - Load Test Password Changes
    • APSForcePWChg - Set Force Password Change Flag
    • SmPortalVfy - Verify SmPortal Configuration
  • Integrating APS with User Management Tools
    • Integration
      • Enabling and Disabling Accounts
        • Strategies
      • Ensuring Password Validity
      • Maintaining Forgotten Password Services (FPS) Questions/Answers
      • Triggering APS Events Properly
    • Delegated Management Services (DMS2)
      • DMS Workflow Library
      • Enabling and Disabling User Accounts
        • Enabling a Disabled User Account
        • Internationalization
      • Integrating Forgotten Question and Answers
        • Format for the Property File
        • Customization Required for Supporting Internationalization
        • APS.cfg configuration
    • CA Identity Manager
  • Using Email
    • Introduction
      • Simple Mail Transfer Protocol (SMTP)
      • Performance
        • Network Latency
        • Fault Tolerance
        • Resource Utilization
      • Configuration
        • APSMAIL_LOCALHOST
        • APSMAIL_SERVER
        • APSMAIL_LOGIN
        • APSMAIL_LOGPATH
        • APSMAIL_PATH
        • APSMAIL_COMMLOG
    • Email Templates
      • How APSMail Uses Templates
      • Macros
        • Application Macros
        • Define Macros
        • Environment Variables
      • Lookups
        • Well Known SiteMinder Attributes
      • Directives
        • Template Processing Control
          • Including Another Template
          • Defining Macro Substitutions
          • Comments
          • Logging Path
        • Server Communications Control
          • Specifying the Mail Server
          • Communications Timeouts
          • Local Machine Name
        • Mail Server Security
          • Mail Server Login
        • Basic Message Control
          • The FROM Address
          • The Sender
          • Message Subject
          • Addressing the Message
          • Sending Carbon Copies
          • Sending Blind Carbon Copies
        • Intermediate Message Control
          • Specifying the Reply To Address
          • Specifying Where to send Delivery Errors
          • Requesting Read Receipts (Return Receipts)
          • Requesting Delivery Receipts (Disposition Notification)
          • Specifying the Sender's Organization
          • Specifying the Message Priority
        • Advanced Message Control
          • Message Formatting
          • Alternative Character Sets
          • Custom X-MAIL Headers
      • Message Body
    • Strategies & Best Practices
      • SMTP (Mail) Servers
      • Using [REM]
      • IUsing [INCLUDE]
      • Internationalization/Localization
      • Addressing Mail
      • Return Addresses
      • Handling Returned Mail
      • Mail Macros
      • Best Practice Recommendation
    • Troubleshooting
      • The SiteMinder Console Log
      • The Send Log
      • The Communications Log
      • Formatting Problems
      • Delivery Problems
      • Limitations
  • Internationalization
    • Introduction
    • SmCPW, APSAdmin & Forgot (User Interfaces)
      • SmCPW
      • APSAdmin
    • Redirection
    • Email
  • About Password Security
    • Cracking Passwords
    • Keeping Passwords Safe
      • DOs
      • DON'Ts
  • SmPortal/SmTransact Installation and Configuration
    • Introduction
      • About Firewalls
    • Installation
      • SmPortal - The Client Side
      • SmTransact - The Policy Server Side
    • Operation
    • Configuration
      • The Server Section
        • Optional Server Settings
      • The Agent Section
        • Optional Agent Settings
      • The Service Section
        • Optional Service Settings
    • Verification
      • SmPortalTest
        • Additional Arguments
      • SmPortalVfy
      • APSPing
  • Internationalization & Localization (APSXLate)
    • Introduction
    • Installation & Configuration
      • Log Files
      • APSXlateTest
    • Translation Files
      • Translation File Format
      • Comments
      • Continuation Lines
      • Header Keywords
      • Button Definitions
      • Translations
  • Best Practices for Storing Legacy/Back-End Credentials
    • Executive Summary
    • Details
      • Updating Application Credentials
      • Updating User Credentials
      • Additional Advantages
        • Password Format & Lifetime
        • Alternative Authentication Schemes
    • Summary
  • How Do I?
    • How Do I: Set up passwords to expire?
    • How Do I: Customize the change password form?
    • How Do I: Configure "3 Strikes and You're Out"?
    • How Do I: Force users to change their password at next login?
    • How Do I: Determine why a user's authentication is rejected?
    • How Do I: Enable an account that APS has disabled?
    • How Do I: Retrieve the date & time that a user last logged in?
    • How Do I: Limit password changes to once per day?
    • How Do I: Eliminate the current password from the change password form?
    • How Do I: Use a backup LDAP server (replicant)?
    • How Do I: Use a consumer LDAP server (satellite)?
    • How Do I: Detect & Prevent FPS Misuse?
    • How Do I: Lock FPS (mis) users out of our site?
    • How Do I: Re-enable FPS for an account?
    • How Do I: Automatically login the user using FPS?
    • How Do I: Allow a user to select their own password during FPS?
    • How Do I: Retrieve statistics about FPS usage?
    • How Do I: Securely support FPS challenge questions?
    • How Do I: Get the FPS challenge questions into the User Directory?
    • How Do I: Integrate the APSAdmin interface into my own Identity Management application?
    • How Do I: Make the APS API return error codes instead of error text?
  • Troubleshooting
    • Connectivity Problems
      • Client Side (SmPortal) Errors
        • AGENT_FAILURE(-1)
        • NOT_IMPLEMENTED (-11)
        • ERROR (-12)
        • ACCESS_DENIED (-13)
        • NO_AGENT (-14)
        • NO_SECRET (-15)
        • NO_SERVERS (-16)
        • AGENT_INIT (-17)
        • NO_SERVER_IP (-18)
        • INVALID_CALL_HANDLE (-19)
        • NO_DYNAMIC_LIBRARY (-20)
        • NO_CONFIGURATION (-21)
      • Server Side (SmTransact) Errors
        • INPUT_TOO_SMALL (1)
        • NO_SERVICE (2)
        • NOT_INSTALLED (3)
        • BUFFER_VIOLATION (4)
        • APPLICATION (5)
        • BAD_SERVICE (6)
        • LIB_PROBLEM (7)
        • OUTPUT (8)
        • NOBUFFER (9)
        • CHUNKING (10)
        • LIB_INIT (11)
        • LENGTH_MISMATCH (12)
        • VERSION (13)
      • SiteMinder Authentication Log
      • New passwords chosen by users are always rejected
      • User Accounts are mistakenly disabled
      • All (or many) accounts are disabled when a single user fails authentication
      • APS does not disable LDAP user accounts
      • Automated Email Notification does not send email
      • Windows NT Users cannot change passwords
      • "Change Password Service is not configured correctly"
      • Error reading user entry ("Not Found") during password change
      • User is asked to authenticate during the FPS process