Agent Guide › Configure the SiteMinder Identity Asserter › Configure the SiteMinder Identity Asserter in SiteMinder › Configure the Identity Asserter to Challenge Requests for Credentials › Create Realms for Challenged Requests

Create Realms for Challenged Requests

If your SiteMinder Identity Asserter is configured to challenge HTTP requests for credentials (the challengeforcredentials Agent configuration parameter is set to Yes), configure standard SiteMinder protection domains and realms to protect your Web container resources.

Note: The following procedure provides an overview of the steps required to create the required policy objects with appropriate parameter settings. For detailed procedural information, see the Policy Server Configuration Guide.

To create realms to protect your web applications

1. Open the SiteMinder Administrative UI.
2. Create a realm with the following properties:
   • Domain

     The domain you created when you configured the SiteMinder Identity Asserter Validation Realm.

   • Name

     A unique name for the realm—for example, Web App Protection Realm.

   • Description

     An optional description. For example, "SiteMinder realm for validating/authenticating identities using the IA."

   • Agent

     The name of the SiteMinder Agent identity that you created for the SiteMinder Agent for WebLogic.

     Enter the Agent name in the text box or click the lookup button (...) to select the Agent name from a list of configured Agent identities.

   • Resource Filter

     /web_app_context

     • web_app_context

       Specifies the J2EE Web application context for the protected web application.

       For example, /mywebapp.

   • Authentication Scheme

     The authentication scheme you created for challenged requests.

     The SiteMinder IA handles Basic authentication itself; other authentication schemes are processed by a Web Agent.