Federation Security Services Guide › Configure SiteMinder as a SAML 1.x Producer › Creating Links to Consumer Resources for Single Sign-on › Choosing Whether to Protect the Intersite Transfer URL

Choosing Whether to Protect the Intersite Transfer URL

The web pages that include the intersite transfer URL links can be part of a realm configured for persistent sessions, which SiteMinder protects. When a user selects one of the links on a protected page, SiteMinder presents the user with an authentication challenge. After the user logs in, a persistent session can be established, which is required to store a SAML assertion.

If you do not to protect these pages, the Producer directs an affiliate user without a SiteMinder session to an authentication URL. This URL prompts the user to log in to receive a SiteMinder session. You define the Authentication URL when you configure an affiliate in the FSS Administrative UI.

Note: To set up persistent sessions, configure the session server. Set up a session server using the Policy Server Management Console.