Guidelines for Updating SiteMinder Policies

Guidelines for updating the SiteMinder policies:

Do not modify the SiteMinder policies configured in Configure SiteMinder Policies. The SiteMinder login module uses these policies for Tier 2 authentication.
Create additional policies for protecting each of the Web AS applications and the Enterprise Portal. See Configure SiteMinder Policies.
The name of the protected resource for Web AS applications depends on the particular Web AS application. For Enterprise Portal, /irj/ is usually the protected resource. For webdynpro applications, protect the /web-dynpro/ resource.
Verify that all users accessing the Web AS or Enterprise Portal applications are included in the policies you created for the /smwebasagent/ validation realm.

More information: