Policy Server Guides › Policy Server Configuration Guide › Authentication Schemes › Basic Over SSL Authentication Schemes

Basic Over SSL Authentication Schemes

The Basic Over SSL Authentication Scheme verifies a user's identity by passing a user name and password credentials to a user directory in a process similar to Basic authentication. However, credential delivery is always done over an encrypted Secure Sockets Layer (SSL) connection even if the protected URLs are not setup to require SSL. The SiteMinder Web Agent accomplishes this by redirecting the user's browser to establish an SSL connection prior to credential delivery. After the credentials are delivered the Web Agent redirects the browser back to the original URL.

For an additional level of security with Basic over SSL authentication, you can create password policies. This SiteMinder feature allows you to manage password rules.