Policy Server Guides › Policy Server Configuration Guide › Agents and Agent Groups › SiteMinder Agents Overview › SAML Affiliate Agents › SAML Affiliate Agent and Federation Security Services Configuration

SAML Affiliate Agent and Federation Security Services Configuration

Configuration of the SAML Affiliate Agent happens at the consumer site—you do not configure a SAML Affiliate Agent at the producer-site Policy Server. However, in the Policy Server User Interface, you set up Federation Security Services components, create affiliate domains, and configure affiliates for the affiliate domains.

Note: In the Policy Server User Interface, there is an option to create an Agent and choose Affiliate Agent as the Agent type. This option is not for the SAML Affiliate Agent—it is only applicable for 4.x Affiliate Agents. Do not select it. More information exists in the Federation Security Services Guide.

RADIUS Agents

Remote Authentication Dial-In User Service (RADIUS) is a protocol that enables you to exchange session authentication and configuration information between a Network Access Server (NAS) device and a RADIUS authentication server. The RADIUS protocol is often used by NAS devices that serve as proxy services, firewalls, or dial-up security devices.

A RADIUS Agent secures an entire application that communicates using the RADIUS protocol.

The Policy Server can be used as a RADIUS authentication server. RADIUS Agents allow the Policy Server to communicate with the NAS client devices.

More information:

Use the Policy Server as a Radius Server

Application Server Agents

The Application Server Agent is a collection of Java components that provide a full-featured SiteMinder Agent for securing WebLogic and WebSphere application server resources. The Application Server Agent integrates SiteMinder with the J2EE platform.

The Application Server Agent can protect the following components:

• Web Applications (including servlets, HTML pages, JSP, image files)
• JNDI lookups
• EJB components
• JMS connection factories, topics, and queues
• JDBC connection pools

The Application Server Agent is a single Agent, but from the perspective of the SiteMinder Policy Server, there are different Agent types that protect application server resources. The Agent types give the Application Server Agent the flexibility to protect servlets, and EJB components in two ways: using the Servlet, or EJB Agent respectively, or using the Web Agent.

Note: For more information on configuring SiteMinder to work with application server Agents, see the SiteMinder Application Server Agent Guide that applies to your platform.