Questions tagged [siteminder]

siteminder is an application sold by Computer Associates that allows web assets to require authentication before access is given.

Computer Associates SiteMinder is a highly scalable solution that provides best practice identity and access management components for Web single sign-on, authentication, authorization, auditing and administration.

SiteMinder has an API written in Java or C and it is worth checking out the PDFs.

Siteminder is now marketed as "CA Single Sign-On".

265 questions
24
votes
1 answer

Spring security PreAuthentication Filter asks for AuthenticationEntryPoint

I am trying to use PreAuthFilter (for Siteminder) with Spring Security 3.0.
Nirmal Patel
  • 5,008
  • 8
  • 38
  • 52
17
votes
5 answers

How can I trust that the SiteMinder HTTP headers haven't been tampered with?

I am completely new to SiteMinder and SSO in general. I poked around on SO and CA's web site all afternoon for a basic example and can't find one. I don't care about setting up or programming SM or anything like that. All of that is already done by…
GregT
  • 1,270
  • 2
  • 16
  • 24
13
votes
2 answers

HTTP request from a C# desktop application to a Siteminder-protected server

I have developed a C# desktop application which makes HTTPS requests to the customers' servers (usually Documentum/SharePoint/Alfresco/NemakiWare/etc HTTPS-based servers). Several customers have asked us to support their servers which are protected…
Nicolas Raoul
  • 55,003
  • 52
  • 197
  • 338
8
votes
1 answer

Grails, Spring Security & Siteminder - problems with resources or userDetails

I am trying to secure my grails application with spring security basing on preAuth by Siteminder. That's basically all I need. The application is used just for checking some stuff so no need for database. I am stuck on some filter problems that I'm…
Dz.
  • 101
  • 1
  • 6
7
votes
1 answer

Spring Security Java Config for Siteminder

I have an inMemoryAuthentication configuration that works: @Configuration @EnableWebMvcSecurity public class WebSecurityConfiguration extends WebSecurityConfigurerAdapter { @Override protected void configure( …
Paul Croarkin
  • 13,719
  • 14
  • 73
  • 108
7
votes
5 answers

Clearing a session in ASP.NET

I'm a new developer, and I've been assigned the task of figuring out why our log out function is not working. I've tried every possible method I can find. Below is the log I've kept that includes the methods I've used. Added a log out button to the…
gbills
  • 93
  • 2
  • 8
6
votes
1 answer

how to convert site minder xml configuration using Spring4 Java config

I am converting an old version based Spring application to annotation based Spring4 application. As a first step I converted all xmls to java configuration based annotations. The application is working fine, but the only issue is with the site…
Alex Man
  • 4,318
  • 15
  • 69
  • 141
5
votes
1 answer

Siteminder Authentication and Android

I'm attempting to connect to a resource that's protected by SiteMinder. Eventually, the app will be in PhoneGap, but for now, I'm just testing the basic communication. When I request the resource, SiteMinder intercepts the request and presents a…
Dan Shookowsky
  • 201
  • 2
  • 8
5
votes
2 answers

Extending php SoapClient for siteminder authentication

Short Version I want to extend SoapClient so it does this internally when accessing the WSDL: curl -L -E /location/of/cert.pem -c /tmp/location/of/cookie.jar https://web-service-provider/servicename?wsdl Long Version I've got a SOAP request similar…
denormalizer
  • 2,116
  • 3
  • 24
  • 36
5
votes
3 answers

What are the ways to integrate Single Sign On with SiteMinder and a to-be-developed java/.Net bespoke solution?

I am thinking of building a bespoke solution using either java or .NET and I want to integrate the authentication layer with SiteMinder. A. From what I have found so far, it seems that SiteMinder provides some kind of APIs for external application…
user690429
  • 51
  • 1
  • 1
  • 3
4
votes
3 answers

SiteMinder SSO Custom Login page

Has anyone got a bare bones custom login page, that will post to the default login.fcc. I'm unsure where to start with this. Presumably it would have javascript code to take a part the query string and then pass it on to the login.fcc
Ray
  • 41
  • 1
  • 1
  • 3
4
votes
1 answer

How to call WCF Http Service behind SiteMinder

I am trying to call WCF 4 Http Web Services which are hosted within an ASP.NET application. The Service is protected behind SiteMinder. I was wondering how I could programmatically call the web service, and more specifically what information will I…
holsee
  • 1,954
  • 2
  • 26
  • 42
4
votes
2 answers

Apache - Convert underscores to dashes in headers

In a project a had to run CA Webagent Siteminder which sends me legacy headers with underscores. Since Apache 2.4 underscores are deprecated and dropped silently. I need a workaround via mod_headers which converts all underscores _ to dashes - in…
Roman
  • 2,061
  • 2
  • 22
  • 43
4
votes
2 answers

Navigate to external URL from a backing bean?

I'm trying to implement proper logout for my Java EE / JSF2 application. It requires two things: I need to logout from JAAS and invalidate the session I then have to navigate to an external URL to fire Siteminder logout The Siteminder logout URL…
egbokul
  • 3,794
  • 4
  • 33
  • 50
4
votes
1 answer

Integrating Spring Security with SiteMinder

How do you integrate Spring Security with SiteMinder to receive a User and Role? I have a project setup with Spring Security 'in-memory' and I want to use convert it to accept SiteMinder header with User and Roles. If SiteMinder will send the role…
user2601995
  • 5,407
  • 8
  • 34
  • 38
1
2 3
17 18