Contents
When the API Gateway authenticates to CA SiteMinder on behalf of a user, SiteMinder can issue a single sign-on token as evidence of the authentication event. The token is eventually returned to the client, which can then use it in subsequent requests to the API Gateway.
Instead of authenticating the client against SiteMinder for every request, the API Gateway need only validate the token. If the token validates, the client can be considered authenticated. If the token does not validate, the client is not considered authenticated.
You can use the SiteMinder Logout filter to invalidate a single sign-on token that was previously issued by SiteMinder. When the token has been invalidated, the client is no longer be considered authenticated.
Note | |
---|---|
You must have already validated the session before calling the SiteMinder Logout filter in your policy. For more details, see the SiteMinder Session Validation topic. |
CA SiteMinder integration requires CA SiteMinder SDK version 12.0-sp1-cr005 or later.
API Gateway
When adding third-party binaries to the API Gateway, you must perform the following steps:
-
Add the binary files as follows:
-
Add
.jar
files to theInstallDir/ext/lib
directory. -
Add
.dll
files to theInstallDir\Win32\lib
directory. -
Add
.so
files to theInstallDir/platform/lib
directory.
-
-
Restart the API Gateway.
Policy Studio
When adding third-party binaries to the Policy Studio, you must perform the following steps:
-
Add
.jar
files to theInstallDir/plugins/thirdparty.runtime.dependencies_11.1.2.1.0
directory. -
Restart the Policy Studio.