You configure a global response to define the attributes that are returned after the authentication or authorization event occurs in an associated global rule.
To configure a global response
The Create Global Response pane opens.
Note: Click Help for descriptions of settings and controls, including their respective requirements and limits.
The global response is saved. You can now add response attributes to the response. See the next section for details about adding response attributes for each Agent type.
Each SiteMinder global response may contain one or more response attributes. Response attributes identify the pieces of information that the Policy Server passes to a SiteMinder Agent. Each SiteMinder Agent type can accept different response attributes.
SiteMinder supports different types of response attributes. The types of response attributes determine where the Policy Server finds the proper values for the response attributes. The types of response attributes that you can configure for a global response are identical to the types of response attributes you can configure for a domain-specific response.
You can configure a response attribute to store the pieces of information that the Policy Server passes to a SiteMinder Agent. Web Agent response attributes support HTTP header variables, cookie variables, redirections to other resources, text, and timeout values. More information on Web Agent response attribute types exists in the Web Agent Configuration Guide.
Note: If you have purchased CA SOA Security Manager, you can find information about the WebAgent-SAML-Session-Ticket-Variable response attribute type in the CA SOA Security Manager Policy Configuration Guide.
To create a response attribute
The Create Response Attribute page appears.
The details in the Attribute Fields are updated to match the specified attribute type.
Note: A list of automatically generated SiteMinder user attributes that you can use in responses exists in SiteMinder Generated User Attributes.
Note: The Attribute Setup section closes when you edit the attribute on the Advanced section.
Note: The maximum time limit that can be entered is 3600 seconds.
The Create Response Attribute Task is submitted for processing, and the response attribute is added to the Attribute List on the Response page.
Configuring a global policy requires you to complete the following procedures:
Copyright © 2012 CA.
All rights reserved.
|
|