Previous Topic: Single Sign-On and Authentication Scheme Protection Levels

Next Topic: Track User Identity Across Anonymous Realms

Allow Automatic Access to Resources that use the OPTIONS Method

The SiteMinder Web Agent still challenges authenticated users who attempt to access resources that use the OPTIONS method. Some examples of resources that use the OPTIONS method include (but are not necessarily limited to) the following:

This challenge occurs because the application associated with the resource sends a request using the OPTIONS method to the web server. Because this request does not include a SiteMinder cookie, the Web Agent issues a challenge.

To prevent users from being challenged for these resources

  1. Set the value of the following parameter to yes:
    autoauthorizeoptions

    Automatically authorizes any requests for resources which use the HTTP OPTIONS method.

    If you set the value of this parameter to yes, also set the value of the PersistentCookies parameter to no.

    Limits: yes, no

  2. Set the value of the PersistentCookies parameter to no.