Previous Topic: Upgrading a Collocated Policy Server and Web Agent

Next Topic: Upgrades and Identity Manager

Upgrades and Federation Security Services

If you are upgrading from r6.0 SP6 cr04 or earlier and plan on installing the Policy Server Option Pack for Federation Security Services, re-import the SiteMinder policy store schema file (smpolicy.smdif) into your policy stores. A new property has been added to support the use of redirect URLs for SAML 1.x single sign-on. The redirect URLs, which are optional and configured in the SAML 1.x authentication scheme, let you redirect users to another location when authentication problems occur.

For example, if a user cannot federate, you can redirect the user to a registration page.

Note: For new installations, the latest version of the policy store schema file has the necessary entries for redirect URLs. There is no additional setup required.

To define the redirect URL property collection in the policy store:

  1. Run the Policy Server installation.
  2. Run the following command:
    smobjimport -ipolicy_store_schema -dsm_admin_user -wsm_admin_password -v
    
    policy_store_schema

    Specifies the location of the SiteMinder policy store scheme file.

    sm_admin_user

    Specifies the name of the SiteMinder Super User account.

    sm_admin_password

    Specifies the password for the SiteMinder Super User account.

    Important! Do not use the force (-f) flag when re-importing the the policy store schema. The force flag overwrites existing policy store data.