|
|
|
To have SiteMinder (and not Domino) authenticate users, set the SkipDominoAuth parameter to yes.
With SkipDominoAuth set to yes and a Super User defined, SiteMinder first identifies and authorizes the user. The Domino Web Agent then identifies that user to the Domino Server as the Super User. As a Super User, the user has access to any resource on the Domino server, assuming the user has the appropriate ACLs.
You should also set SkipDominoAuth parameter to yes when users are not stored in the Domino Directory because Domino will not have an identity to use for authorization privileges.
If you set SkipDominoAuth to no, Domino authenticates users on its own using the actual user name or the default user name.
The following table shows how the setting of the SkipDominoAuth parameter affects how the user is identified.
|
SkipDominoAuth Value |
Identified to the Domino Server As |
Notes |
|---|---|---|
|
yes |
Super User |
Super User must be defined in the Domino Directory |
|
no |
Actual User |
User must be in the Domino Directory |
|
no |
Default User |
User must be in the Domino Directory |
|
no |
Super User |
The requested resource is automatically authorized, meaning that no authentication challenge will be presented to the user |
| Copyright © 2010 CA. All rights reserved. | Email CA about this topic |