Agent Guide › Overview › SiteMinder Authentication Provider

SiteMinder Authentication Provider

The SiteMinder Authentication Provider module allows WebLogic to establish trust by validating user credentials against SiteMinder user directories.

The SiteMinder Authentication Provider can handle:

• Requests that originate from the SiteMinder Identity Asserter (which have already been authenticated by SiteMinder and include SiteMinder session information).
• Authentication requests from the WebLogic security layer when the user credentials are collected through HTTP (browser-based) client authentication and Java Client authentication.

The SiteMinder Authentication Provider validates that the username associated with a request maps to a user within the associated user directory configured in SiteMinder.

If SiteMinder authentication is successful, the SiteMinder Authentication Provider populates a WebLogic subject with a SiteMinder principal that contains the username and SiteMinder session data required to prove that SiteMinder authentication has occurred (required by the SiteMinder Authorization Provider).