Questions tagged [siteminder]

siteminder is an application sold by Computer Associates that allows web assets to require authentication before access is given.

Computer Associates SiteMinder is a highly scalable solution that provides best practice identity and access management components for Web single sign-on, authentication, authorization, auditing and administration.

SiteMinder has an API written in Java or C and it is worth checking out the PDFs.

Siteminder is now marketed as "CA Single Sign-On".

264 questions
24
votes
1 answer

Spring security PreAuthentication Filter asks for AuthenticationEntryPoint

I am trying to use PreAuthFilter (for Siteminder) with Spring Security 3.0.
Nirmal Patel
  • 5,128
  • 8
  • 41
  • 52
18
votes
5 answers

How can I trust that the SiteMinder HTTP headers haven't been tampered with?

I am completely new to SiteMinder and SSO in general. I poked around on SO and CA's web site all afternoon for a basic example and can't find one. I don't care about setting up or programming SM or anything like that. All of that is already done by…
GregT
  • 1,300
  • 3
  • 16
  • 25
13
votes
2 answers

HTTP request from a C# desktop application to a Siteminder-protected server

I have developed a C# desktop application which makes HTTPS requests to the customers' servers (usually Documentum/SharePoint/Alfresco/NemakiWare/etc HTTPS-based servers). Several customers have asked us to support their servers which are protected…
Nicolas Raoul
  • 58,567
  • 58
  • 222
  • 373
9
votes
1 answer

Spring Security Java Config for Siteminder

I have an inMemoryAuthentication configuration that works: @Configuration @EnableWebMvcSecurity public class WebSecurityConfiguration extends WebSecurityConfigurerAdapter { @Override protected void configure( …
Paul Croarkin
  • 14,496
  • 14
  • 79
  • 118
8
votes
1 answer

Grails, Spring Security & Siteminder - problems with resources or userDetails

I am trying to secure my grails application with spring security basing on preAuth by Siteminder. That's basically all I need. The application is used just for checking some stuff so no need for database. I am stuck on some filter problems that I'm…
Dz.
  • 101
  • 1
  • 6
7
votes
5 answers

Clearing a session in ASP.NET

I'm a new developer, and I've been assigned the task of figuring out why our log out function is not working. I've tried every possible method I can find. Below is the log I've kept that includes the methods I've used. Added a log out button to the…
gbills
  • 93
  • 2
  • 8
6
votes
1 answer

how to convert site minder xml configuration using Spring4 Java config

I am converting an old version based Spring application to annotation based Spring4 application. As a first step I converted all xmls to java configuration based annotations. The application is working fine, but the only issue is with the site…
Alex Man
  • 4,746
  • 17
  • 93
  • 178
5
votes
1 answer

Siteminder Authentication and Android

I'm attempting to connect to a resource that's protected by SiteMinder. Eventually, the app will be in PhoneGap, but for now, I'm just testing the basic communication. When I request the resource, SiteMinder intercepts the request and presents a…
Dan Shookowsky
  • 221
  • 2
  • 8
5
votes
3 answers

SiteMinder SSO Custom Login page

Has anyone got a bare bones custom login page, that will post to the default login.fcc. I'm unsure where to start with this. Presumably it would have javascript code to take a part the query string and then pass it on to the login.fcc
Ray
  • 51
  • 1
  • 1
  • 3
5
votes
2 answers

Extending php SoapClient for siteminder authentication

Short Version I want to extend SoapClient so it does this internally when accessing the WSDL: curl -L -E /location/of/cert.pem -c /tmp/location/of/cookie.jar https://web-service-provider/servicename?wsdl Long Version I've got a SOAP request similar…
denormalizer
  • 2,186
  • 3
  • 24
  • 36
5
votes
3 answers

What are the ways to integrate Single Sign On with SiteMinder and a to-be-developed java/.Net bespoke solution?

I am thinking of building a bespoke solution using either java or .NET and I want to integrate the authentication layer with SiteMinder. A. From what I have found so far, it seems that SiteMinder provides some kind of APIs for external application…
user690429
  • 51
  • 1
  • 1
  • 3
4
votes
1 answer

How to call WCF Http Service behind SiteMinder

I am trying to call WCF 4 Http Web Services which are hosted within an ASP.NET application. The Service is protected behind SiteMinder. I was wondering how I could programmatically call the web service, and more specifically what information will I…
holsee
  • 1,974
  • 2
  • 27
  • 43
4
votes
2 answers

Apache - Convert underscores to dashes in headers

In a project a had to run CA Webagent Siteminder which sends me legacy headers with underscores. Since Apache 2.4 underscores are deprecated and dropped silently. I need a workaround via mod_headers which converts all underscores _ to dashes - in…
Roman
  • 2,530
  • 2
  • 27
  • 50
4
votes
2 answers

Navigate to external URL from a backing bean?

I'm trying to implement proper logout for my Java EE / JSF2 application. It requires two things: I need to logout from JAAS and invalidate the session I then have to navigate to an external URL to fire Siteminder logout The Siteminder logout URL…
egbokul
  • 3,944
  • 7
  • 36
  • 54
4
votes
1 answer

How to handle CORS preflight requests in a SiteMinder protected environment?

I'm building an AngularJS application that will interact with RESTful services running on a different host. Since requests are going across origins, CORS is getting into the picture. Since requests specify JSON as expected content type, CORS…
jubedus
  • 55
  • 1
  • 5
1
2 3
17 18