Federation Security Services Guide › Overview of a SiteMinder Federation Partnership Setup › Set Up Producing Authority Components › Create Links to Target Resources (optional) › Initiate SAML 1.x Single Sign-On at the Producer

Initiate SAML 1.x Single Sign-On at the Producer

At the producer, create pages that contain links which direct the user to the consumer site. Each link represents an intersite transfer URL. The user has to visit the intersite transfer URL, which then sends a request to the producer-side Web Agent before being redirected to a consumer site.

The link that the user selects at the producer must contain certain query parameters. These parameters are supported by an HTTP GET request to the producer Web Agent.

For SAML artifact profile, the syntax for the intersite transfer URL is:

http://producer_site/affwebservices/public/intersitetransfer?SMASSERTIONREF=
QUERY&NAME=affiliate_name&TARGET=http://consumer_site/target_url?query_parameter_name%3Dquery_parameter_value%26query_parameter_name%3Dquery_parameter_value&SMCONSUMERURL=http://consumer_site/affwebservices/public/samlcc&AUTHREQUIREMENT=2

• producer_site

  Specifies the server and port number of the machine hosting the Web Agent Option Pack or the SPS federation gateway, depending on which components are installed in your federation network.

• consumer_site

  Specifies the server and port number of the machine hosting the Web Agent Option Pack or the SPS federation gateway, depending on which components are installed in your federation network.

For SAML POST profile, the syntax for the intersite transfer URL is:

http://producer_site/affwebservices/public/intersitetransfer?SMASSERTIONREF=
QUERY&NAME=affiliate_name&TARGET=http://consumer_site/target_url

• producer_site

  Specifies the server and port number of the machine hosting the Web Agent Option Pack or the SPS federation gateway, depending on which components are installed in your federation network.

• consumer_site

  Specifies the server and port number of the machine hosting the Web Agent Option Pack or the SPS federation gateway, depending on which components are installed in your federation network.
  

Note: The SMCONSUMERURL and AUTHREQUIREMENT parameters are not used by SAML POST profile; however, if you include one of these parameters in the intersite transfer URL, you must also include the other.