Web Agent Guides › Web Agent Configuration Guide › Single Sign-On Security Zones › Configure Security Zones

Configure Security Zones

Two single sign-on parameters have been added to the Web Agent configuration objects in the policy store. These settings may also be used in local configuration files and are added to the sample local configuration files laid down during installation.

Note: All Web Agents configured through the same agent configuration object belong to the same single sign-on zone.

• SSOZoneName

  Specifies the (case-sensitive) name of the single sign-on security zone a Web Agent supports. The value of this parameter is prepended to the name of the cookie a Web Agent creates. This helps you associate cookies with their respective cookie domains. When this parameter is not empty, SiteMinder generates cookies using the following convention:

  ZonenameCookiename.

  Default: Empty (uses SM as a zone name, which gives the cookies the following default names):

  • SMSESSION
  • SMIDENTITY
  • SMDATA
  • SMTRYNO
  • SMCHALLENGE
  • SMONDENIEDREDIR

  Limits: Single-valued

  Example: Setting the value to Z1 creates the following cookies:

  • Z1SESSION
  • Z1IDENTITY
  • Z1DATA
  • Z1TRYNO
  • Z1CHALLENGE
  • Z1ONDENIEDREDIR
• SSOTrustedZone

  Defines an ordered (case-sensitive) list of trusted SSOZoneNames of trust for a single sign-on security zone. Use SM to add the default zone if necessary. Agents always trust their own SSOZoneName above all other trusted single sign-on zones.

  Default: Empty (SM or the SSOZoneName if provided)

  Limits: Multi-valued