Agent Guide › Configure the SiteMinder Authentication Provider › Configure the Agent to Return Group Membership to WebLogic Using Responses

Configure the Agent to Return Group Membership to WebLogic Using Responses

During user authentication, the SiteMinder Agent can return physical or virtual group membership information to the WebLogic Server by using SiteMinder HTTP header responses from the Policy Server. When the SiteMinder Agent receives responses containing the _SM_WLS_GROUP=group name syntax (where group_name is a response attribute value from the Policy Server that could be a physical group name from the user store or a virtual group), the SiteMinder Agent converts the group_name value to a group principal and adds this principal to the subject after successful authentication. The SiteMinder Agent adds the same amount of group principals as responses received from the Policy Server.