Previous Topic: Create a Protection Policy

Next Topic: Realms and Rules for the Sample Application

Protect the Sample Application

To use the Credentials Selector, a SiteMinder application only has to have its protected realms configured with the component's front-end authentication scheme. The policies protecting the application may have restrictions based on the user's authentication level and authentication context.

In this solution, the sample application generates the greeting message for the authenticated and authorized user.

The file that generates this greeting has the following code:

<html>
<head></head>
<body>

<h3>
<p>Greetings, <%=Request.ServerVariables("HTTP_USERNAME") %>!
<p>Your authentication level is <%=Request.ServerVariables("HTTP_AUTHLEVEL") %>
<p>You have used <%=Request.ServerVariables("HTTP_AUTHCONTEXT") %> authentication
</h3>

</body>
</html>

The different authentication options in the login dialog result in different access levels and a different greeting, such as:

Greetings, SampleUser!
Your authentication level is 5
You have used username/password authentication

Greetings, SampleUser!
Your authentication level is 10.
You have used X.509 client certificate authentication

Greetings, SampleUser!
Your authentication level is 5
You have used Windows domain authentication

The sample application has four kinds or resources contained in different realms. The realms must each be configured with the front-end authentication scheme.


Copyright © 2010 CA. All rights reserved. Email CA about this topic