Implementation Guide › Architectural Considerations › Implementation Considerations › Determine if Partnerships Require Federation Security Services

Determine if Partnerships Require Federation Security Services

Do existing or planned business-to-business (B2B) partnerships require your organization to share resources securely with partners?

CA SiteMinder Federation Security Services lets you extend SiteMinder functionality to partner sites by enabling identity federation. Federated transactions between partner organizations let your enterprise:

• Exchange user information between partners in a secure fashion
• Establish a link between a user identity at a partner and a user identity in your company
• Enable single sign–on across partner web sites in multiple domains
• Handle different user session models between partner sites, such as single logout across all partner web sites or separate sessions for each partner web site
• Control access to resources based on user information received from a partner
• Allow interoperability across heterogeneous environments

Federation Security Services lets your enterprise generate, consume, or generate and consume assertions. Federation Security Services supports the following communication standards and protocols:

• SAML 1.0, 1.1, and 2.0
• Microsoft ADFS/WS-Federation
• SAML browser artifact protocol
• SAML POST protocol
• WS-Federation Passive Requestor Profile protocol

Note: Federation Security Services is separately licensed from SiteMinder. Contact your CA account representative for more information about licensing. For more information about Federation Security Services, see the Federation Security Services Guide.

If your organization plans on implementing Federation Security Services, use a table similar to the following to identify partners and the possible methods for enabling identity federation.