To Configure the SiteMinder Agent to Protect OpenSSO Enterprise URLs

This configuration protects the SAML Single Sign-On Service URL so that the SiteMinder session must be established before the SAML assertion is generated.

1. In the SiteMinder administration console, create a new realm in unprotected mode.

   In this example, the realm is named opensso.

   

2. Create a rule that protects only the SAML2 SSO URL.

   Other URLs are unprotected for now.