Release Notes › Policy Server Release Notes › Defects Fixed in SiteMinder Releases › Defects Fixed for 6.0 SP5 › SiteMinder Single Sign-on (SSO) does not Work Across Multiple User Directories for the Same User Identity (45735)

SiteMinder Single Sign-on (SSO) does not Work Across Multiple User Directories for the Same User Identity (45735)

This is no longer an issue. The Single Sign-on (SSO) feature of SiteMinder will now work across multiple user directories in disparate policy stores even if the user directory name or user DN differ across different user stores for the same actual user identity.

For this, a new Authentication-Validation directory mapping has been introduced. The Authentication-Validation maps authentication directory name to validation directory so that the user authenticated against one user directory can be validated against another user directory. The directory mapping can be done on Universal ID or User DN.

The Authentication-Validation mapping object has three attributes:

• Authentication directory name
• Validation directory OID
• Mapping Type