New Features

Support for Security Token Service

CA SiteMinder® SPS supports Security Token Service (STS) to let CA SiteMinder® implement single sign-on using the WS-Federation Active Profile.

For information about STS, see the CA SiteMinder® SPS Administration Guide and Online Help.

Enhanced Session Assurance with DeviceDNA™

Enhanced Session Assurance with DeviceDNA™ helps prevent unauthorized users from hijacking legitimate sessions with stolen cookies. The session clients are validated using the unique DeviceDNA™ that the product collects from the system of the user. This validation assures that the client who initiated the session is the same client that is requesting access. Users lacking valid DeviceDNA™ are denied access to protected resources.

For more information, see the CA SiteMinder® Policy Server Configuration Guide.

New Virtual Host Parameter to Manage the HTTP Host Header

CA SiteMinder® SPS provides the filteroverridepreservehost parameter to manage the HTTP Host header.

For information about configuring filteroverridepreservehost, see the CA SiteMinder® SPS Administration Guide.