Previous Topic: Gather Configuration Information for your Authentication Mode

Next Topic: Gather Information to Configure Your Federation Mode


Gather Information to Configure Your SSO Mode

To configure the SiteMinder Agent for SAP Web AS for SSO mode, the configuration wizard requires the following information:

Configuration File Location

Specifies the location and name of the file that contains the configuration settings for the SiteMinder Agent for SAP Web AS.

Default: (Windows) C:\Program Files\CA\sapwebas\webasagent\sapwebas\conf

Default: (UNIX) <home-dir>/sapwebas/webasagent/sapwebas/conf

Agent Mode
SSO Mode

Authenticates the user to the SAP Web AS server using the SiteMinder Policy Server and SiteMinder Web Agent.

FIPS Mode Setting

Specifies one of the following algorithms:

FIPS Compatibility/AES Compatibility

Uses algorithms existing in previous versions of SiteMinder to encrypt sensitive data and is compatible with previous versions of SiteMinder. If your organization does not require the use of FIPS-compliant algorithms, use this option.

FIPS Migration/AES Migration

Allows a transition from FIPS-compatibility mode to FIPS-only mode. In FIPS-migration mode, SiteMinder environment continues to use existing SiteMinder encryption algorithms as you reencrypt existing sensitive data using FIPS-compliant algorithms.

FIPS Only/AES Only

Uses only FIPS-compliant algorithms to encrypt sensitive data in the SiteMinder environment. This setting does not interoperate with, nor is backwards-compatible with, previous versions of SiteMinder.

Default: FIPS Compatibility/AES Compatibility

Note: FIPS is a US government computer security standard that accredits cryptographic modules which meet the Advanced Encryption Standard (AES).

Important! Use a compatible FIPS/AES mode (or a combination of compatible modes) for both the SiteMinder agent and the SiteMinder Policy Server.

SiteMinder Policy Server Clustering Environment

Specifies one of the following configurations:

Clustering Environment

Creates groups of Policy Servers that work together as a cluster.

Non-Clustering Environment

Does not implement Policy Server clustering.

Load Balancing

Distributes all traffic equally among the total number of Policy Servers. Failover occurs if one Policy Server is not available.

Cluster Threshold Value

Specifies the minimum percentage of Policy Servers in a cluster that are available. Failover to another cluster occurs when the available percentage drops below the specified number.

Default: 50
SiteMinder Policy Server IP Address or FQDN

Specifies the following information to create groups of Policy Servers, which work together as a cluster:

Cluster Number

Specifies a number that identifies a group of Policy Servers.

IP or FQDN

Specifies an IP address or fully-qualified domain name (FQDN) of a SiteMinder Policy Server. The Policy Server defaults to the port values of 44441, 44442 and 44443 for the Accounting, Authentication, and Authorization servers.

If you want the Policy Server to use ports other than the default ports, append the non-default ports after the IP address or FQDN. Use a comma as a separator. Specify the ports in the following order: Accounting port, Authentication port, Authorization port.

IP Address Example (assumes default ports): 127.0.0.1

IP Address Example with non-default ports: 111.12.1.1, 12345, 23456, 34567

FQDN Example: mypolicyserver.example.com

Agent Name

Specifies name of the 4.x compatible Agent Object on your SiteMinder Policy Server.

Default: webasagent

Shared Secret Key

Specifies the shared secret key for your SiteMinder Policy Server that is used to encrypt communications to the 4.x Agent Object.

Resource URI

Specifies the URI of the protected resource that is defined on your SiteMinder Policy Server.

This value is used as a tier 2 validation realm by the Agent for SAP Web AS. This URI must match the protected resource used in the policies.

Default: /smwebasagent/

License String

Specifies the value of the license key for the SiteMinder Agent for SAP Web AS.

If you do not specify a string, the software assumes that you are using an evaluation license i. The evaluation license allows you to use the agent for a maximum period of two hours, after which you are required to restart the Web AS J2EE engine.

Error URL

Specifies an absolute URL where the SiteMinder Agent for SAP Web AS redirects users when it cannot authenticate them. If you do not specify a value for the Error URL and authentication fails, an error message is displayed in the browser.

Example: http://server.example.com/error.html

More information:

SiteMinder Agent for SAP Web AS SSO Mode Configuration Worksheet