Implementation Guide › Architectural Considerations › Implementation Considerations › Determine how to Manage Policy Servers › Local Policy Server Management

Local Policy Server Management

If individual business units manage Policy Servers and policy stores locally, consider that local Policy Server management:

• Lets each business unit manage their security requirements based on their individual needs.
• Can increase the complexity of the SiteMinder infrastructure:
  • Local Policy Server management can result in more Policy Server and policy stores to manage and upgrade.
  • If single sign–on is a requirement, local Policy Server management results in additional SiteMinder configuration. As illustrated, Policy Servers in both business units must share a key store to let all SiteMinder Agents share the same keys.

    Note: The illustration details a shared key store to depict a single sign–on requirement. A shared key store is not the only way to implement single sign–on and additional requirements exist. For more information about key management scenarios to facilitate single sign–on, see the Policy Server Administration Guide.

• Can make a consistent implementation and management of SiteMinder core objects, policies, and EPM applications more challenging because SiteMinder administrators are located in disparate business units.

The following illustration details two business units managing Policy Servers locally: