Previous Topic: Create a Global Rule for Authorization EventsNext Topic: Create the Global Policy


Configure a Global Response

You configure a global response to define the attributes that are returned after the authentication or authorization event occurs in an associated global rule.

To configure a global response

  1. Click Policies, Global.
  2. Click Global Response, Create Global Response.

    The Create Global Response pane opens.

    Note: Click Help for descriptions of settings and controls, including their respective requirements and limits.

  3. Enter the global response name.
  4. Select a SiteMinder Agent type from the SiteMinder Agent type list.
  5. Click Submit.

    The global response is saved. You can now add response attributes to the response. See the next section for details about adding response attributes for each Agent type.

Response Attributes for Global Responses

Each SiteMinder global response may contain one or more response attributes. Response attributes identify the pieces of information that the Policy Server passes to a SiteMinder Agent. Each SiteMinder Agent type can accept different response attributes.

Global Response Attribute Types

SiteMinder supports different types of response attributes. The types of response attributes determine where the Policy Server finds the proper values for the response attributes. The types of response attributes that you can configure for a global response are identical to the types of response attributes you can configure for a domain-specific response.

Configure a Global Web Agent Response Attribute

You can configure a response attribute to store the pieces of information that the Policy Server passes to a SiteMinder Agent. Web Agent response attributes support HTTP header variables, cookie variables, redirections to other resources, text, and timeout values. More information on Web Agent response attribute types exists in the Web Agent Configuration Guide.

Note: If you have purchased CA SOA Security Manager, you can find information about the WebAgent-SAML-Session-Ticket-Variable response attribute type in the CA SOA Security Manager Policy Configuration Guide.

To create a response attribute

  1. Click Create Response Attribute.

    The Create Response Attribute page appears.

  2. Select a response attribute.
  3. Select an attribute type.

    The details in the Attribute Fields are updated to match the specified attribute type.

  4. Complete the details in the Attribute Fields.

    Note: A list of automatically generated SiteMinder user attributes that you can use in responses exists in SiteMinder Generated User Attributes.

  5. (Optional) Edit the attribute in the Script field.

    Note: The Attribute Setup section closes when you edit the attribute on the Advanced section.

  6. Specify Cache Value or Recalculate value every ... seconds.

    Note: The maximum time limit that can be entered is 3600 seconds.

  7. Click Submit.

    The Create Response Attribute Task is submitted for processing, and the response attribute is added to the Attribute List on the Response page.

More information:

Global Response Attribute Types

How to Configure Global Policy Objects

Configuring a global policy requires you to complete the following procedures:

  1. Create the Global Policy
  2. Add Global Rules to the Global Policy
  3. (Optional) Associate a Global Rule with a Response