Web Agent Guides › Web Agent Configuration Guide › Single Sign-On Security Zones › Security Zones Overview › Other Cookies Affected by Single Sign-On Zones

Other Cookies Affected by Single Sign-On Zones

SiteMinder uses state cookies to manage the various events surrounding authentication and authorization. All of these cookies by default begin with the default single sign-on security zone prefix SM. If a new single sign-on zone name is specified, then these cookies are also named to reflect the specified non-default zone name. Below is a list of cookies that are affected by defining a new single sign-on zone:

• SMCHALLENGE
• SMDATA
• SMIDENTITY
• SMONDENIEDREDIR
• SMSESSION
• SMTRYNO

If a zone name of Z1 is specified, for example, the Web Agent begins creating Z1CHALLENGE=YES cookies for Basic authentication. This allows administrators to create islands of SiteMinder application single sign-on in a single cookie domain (for example, ca.com) where agents will not interfere with each other. The single sign-on trusted zone list then allows single sign-on to occur between these isolated single sign-on zones in a predictable fashion.