CA SiteMinder® Federation Standalone Guide › CA SiteMinder® Integration with CA SiteMinder® Federation Standalone › How to Integrate CA SiteMinder® Federation Standalone and CA SiteMinder®

How to Integrate CA SiteMinder® Federation Standalone and CA SiteMinder®

A deployed CA SiteMinder® system can integrate with CA SiteMinder® Federation Standalone using the CA SiteMinder® Connector, a software component included with CA SiteMinder® Federation Standalone. The Connector enables the following interaction between federation and web access management deployments:

• Establishing an identity to generate an assertion.

  At the asserting party, a user arrives at CA SiteMinder® Federation Standalone but has no session. The Connector communicates with CA SiteMinder® to establish a CA SiteMinder® session. Based on the contents of the CA SiteMinder® session, the Connector creates a federation session. Using this session information, a SAML assertion is generated for the user.

• Establishing an identity for CA SiteMinder® to determine authorization privileges.

  At the relying party, a user authenticates with CA SiteMinder® Federation Standalone and a federation session is generated. The Connector passes on the federation session with the user name to CA SiteMinder®, which generates a CA SiteMinder® session from the federation session. The user is now identified and is not rechallenged for credentials. CA SiteMinder® determines the authorization privileges for the requested resources at the relying party.

The following figure shows the configuration process when integrating with the Connector:

Complete the following configuration steps:

1. Configure a policy to generate a CA SiteMinder® session.
2. Configure the Connector settings.
3. Enable the Connector at the partnership level.