Previous Topic: Load Balancers and Session AffinityNext Topic: Claims-based Authentication Overview


Federation and Claims-based Authentication

Enterprise applications and services are increasingly distributed across organizations. They have customers and partners who reside outside of the enterprise that need access to SharePoint applications within the enterprise. As a result, the need for secure but seamless access to SharePoint resources has increased.

CA SiteMinder Agent for SharePoint lets you protect your SharePoint resources using CA SiteMinder web access management capabilities. The federation capabilities allow partnering organizations to trust and share digital identities and attributes of employees, customers, and suppliers across trust domains. These trust domains can exist within one organization or between different organizations.

These federation capabilities also provide single sign-on across partner sites. The Agent for SharePoint provides a custom CA SiteMinder solution which issues claims and packages claims into security tokens, used to validate and access SharePoint resources.

The following section gives an overview about federation and claims-based authentication used in this solution.