Previous Topic: Configure Affiliate Response Attributes

Next Topic: Upgrade to SAML Affiliate Agent v6.x QMR 6

Use SAML Affiliate Agent Default HTTP Headers

As part of the Web application environment, the SAML Affiliate Agent submits default HTTP headers to the Web server, which in turn, makes them available for Web applications. You can use these headers to include functions and enable your Web applications to personalize content. Headers can store information such as a user’s name and the type of action a user is authorized to perform.

The Agent sends these headers regardless of whether or not they are called from a Web application.

The following table lists the default HTTP headers issued by the SAML Affiliate Agent.

Default HTTP Header

Description

HTTP_SMCOMPANYSOURCEID

The company source ID specified in the AffiliateConfig.xml file, such as b818452610a0ea431bff69dd346aeeff83.

HTTP_SMAUTHORIZED

Confirms that the user is authorized. The Agent includes this header only if the user is authorized. If the user is not authorized or if the resource is unprotected, this header is not returned.

HTTP_SMUSER

Login name of the authenticated user, such as user1. If a user does not provide a user name at log in, such as certificate-based authentication, then this header is not set.

HTTP_SMUSERDN

The user’s distinguished name recognized by SiteMinder. For example, uid=user1,ou=People,o=netegrity.com