Configure the following fields on the SiteMinder Session
Validation screen:
Name:
Enter an appropriate name for the filter.
Agent Name:
Click the button on the right to select a previously configured agent to connect
to SiteMinder. This name must correspond with the name of an
agent previously configured in the SiteMinder Policy Server.
At runtime, the Enterprise Gateway connects as this agent to a running instance of
SiteMinder.
To add an agent, right-click the SiteMinder/SOA Security Manager
Connections tree node, and select Add a SiteMinder
Connection. Alternatively, you can add SiteMinder connections under
the External Connections node in the Policy Studio tree view.
For details on how to configure a SiteMinder connection, see the
SiteMinder/SOA Security Manager
Connection topic.
Resource:
Enter the name of the protected resource for which the end-user must be
authenticated. You can enter a property representing a message attribute,
which is expanded to a value a runtime. Properties have the following format:
For example, to specify the original path on which the request is received
by the Enterprise Gateway as the resource, enter the following property:
Action:
The end-user must be authenticated for a specific action on the protected
resource. By default, this action is taken from the HTTP verb used in the
incoming request. You can use the following property to get the HTTP verb:
Alternatively, any user-specified value can be entered here.
Message attribute containing session:
Enter the name of the message attribute that contains the single
sign-on token generated by SiteMinder. By default, the token is stored
in the siteminder.session message attribute, but can
be stored in any attribute.
|