Federation Security Services Guide › Overview of a SiteMinder Federation Partnership Setup › Set Up Consuming Authority Components › Create Links to Initiate Single Sign-on (optional) › Initiate WS-Federation Single Sign-on at the Resource Partner

Initiate WS-Federation Single Sign-on at the Resource Partner

If a user visits the Resource Partner before visiting the Account Partner, you have to create an HTML page, such as a site selection page that contains a list of the Account Partners with which to authenticate. Upon selecting a link, the user is directed to the Single Sign-on Service at the Account Partner. The site selection page has to reside in an unprotected realm.

The hard-coded link that the user clicks on at the Resource Partner must contain certain query parameters. These parameters are supported by an HTTP GET request to the Single Sign-on Service at the Account Partner's Policy Server.

The syntax for the link is:

https://host:port/affwebservices/public/wsfedsso?wa=wsignin1.0&wtrealm=RP_ID

• host:port

  Indicates the server and port number where the Single Sign-on service resides

• RP_ID

  Specifies the Resource Partner identity

Note: You do not need to HTTP-encode the query parameters.