Implementation Guide › SiteMinder Components › SiteMinder Components › CA Business Intelligence › Policy Store

Policy Store

(Required) The SiteMinder policy store (policy store) is an entitlement store that resides in an LDAP directory server or ODBC database. The purpose of this component is to store all policy-related objects, including the:

• Resources SiteMinder is protecting
• Methods used to protect those resources
• Users or groups that can or cannot access those resources
• Actions that must take place when users are granted or denied access to protected resources

The Policy Server uses this information, collectively known as a policy, to determine if a resource is protected and if an authenticated user is authorized to access the requested resources.

Note: For more information about configuring a policy store, see the documentation roadmap.

More information:

Documentation Roadmap

User Store

(Required) A SiteMinder user store connection (user store connection) is a connection to an existing user directory or database in your enterprise network. You are not required to use a proprietary SiteMinder user store. The purpose of the user store connection is to make user data available to the Policy Server, which includes the following:

• Organizational information
• User and group attributes
• User credentials, such as passwords
• User attributes, such as first and last name

The Policy Server uses these connections to:

• Verify user credentials when an Agent submits a request for a protected resource
• Retrieve user attributes for the SiteMinder features that require specific user data

Note: For more information about configuring a user store connection, see the documentation roadmap.

More information:

Documentation Roadmap

External Administrative User Store

(Optional) By default, the Administrative UI uses the policy store as its source for SiteMinder administrator credentials. This default configuration lets you manage the environment immediately after configuring a policy store and installing the Administrative UI. When you configure a policy store, the default SiteMinder super user account (siteminder) is created. This account has maximum system privileges, and is used to access the Administrative UI for the first–time and to create additional SiteMinder administrators.

You can configure the Administrative UI to use an external administrator user store, for example, a corporate directory. An external administrative user store is a connection to an LDAP directory server or ODBC database in your enterprise network. Consider the following:

• An Administrative UI can only connect to a single external administrative user store.
• An Administrative UI can be configured to managed multiple Policy Servers. If an Administrative UI is to manage multiple Policy Servers, a connection to an external administrator user store is required.
• If you configure more than one Administrative UI for high–availability, the same external administrative user store makes all administrators available to each Administrative UI.

Note: For more information about SiteMinder administrators and configuring an external administrative user store, see the documentation roadmap.

More information:

Documentation Roadmap