Step 2: Create Sample CA SiteMinder Administration Server Objects

Learn how to install CA-SiteMinder Web Agent and configure CA-SiteMinder Objects.

Using Admin Console Integrate CA-SiteMinder with Policy Manager (Main Topic)

Table of Contents

  1. Install CA-SiteMinder Objects
  2. Create Host and Agent Configurations
  3. Create Domain and Realm Confirmation

Install CA-SiteMinder Objects

Using the CA SiteMinder Administration Console, create the CA SiteMinder objects. This step must be performed before installing SOA Software Policy Manager and SOA Software Network Director so both applications can connect to and use CA SiteMinder. The following table illustrates the objects that should be defined. Sample names are provided for illustration purposes:

Object Name Description
Web Agent

Named soaws-agent

Agent Group Named soaws-grp and containing the new soaws-agent agent. Adding an Agent Group is optional.
Agent Configuration Object Named soaw with just the following property:

DefaultAgentName: soaws-agent
Domain

Named soaws-domain. Configured for the User Stores that your organization will be using to authenticate end-users.

Realm

Within the new Domain named soa-auth-realm configured with:

Agents:  soaw-group
Resource filter:  /soaauthenticationrealm
Authentication scheme:  Basic

Back to top

Create Host and Agent Configurations

To create host and agent configurations perform the following steps:

Create Host Configuration

Create a Host Configuration or verify that one is already defined.

  1. Launch the CA SiteMinder Administration Console.
  2. Enter the name of the host machine.
  3. Click Apply, then OK to continue.


    SiteMinder Host Configuration Object Dialog: Host Configuration Object Properties

Create Agent

  1. Enter the name of the agent (e.g., soaws-agent).
  2. Select the SiteMinder agent type.
  3. Click Apply, then OK to continue.


    SiteMinder Agent Dialog: Agent Properties

Create Agent Group

You can add the Agent to an Agent Group. This step is optional.

  1. Enter a group name (e.g., soaws-group).
  2. Select the CA SiteMinder agent type.
  3. Verify that the group member matches agent specified in the previous step (i.e, soaws-agent).
  4. Click Apply, then OK to continue.


    SiteMinder Agent Group Dialog: Agent Group Properties

Create Agent Configuration Object

The Agent Configuration Object must be the default Agent Name or a list of Agent Names. The Agent Name parameters are used to map Agent Names to specific hosts within a single Agent Configuration Object.

  1. Set the DefaultAgentName property to your agent above (e.g., soaws-agent).
  2. Click Apply, then OK to continue.


    SiteMinder Agent Configuration Object Dialog: Agent Configuration Object Properties

Back to top

Create Domain and Realm Configuration

To create a domain and realm configuration, perform the following steps:

Create Domain and Realm

This task should be performed once per "integration" versus once per agent/host.

  1. In the SiteMinder Administration Console, click the Domains tab.


    SiteMinder 6.0 Administration: Domains

Set User Store for Domain

  1. Right-click on the Domain you would like to configure. The SiteMinder Domain Dialog > Domain Properties screen displays.
  2. Set the user store your organization will be using to authenticate users.


    SiteMinder Domain Dialog: Domain Properties

Add Realm Rule

  1. On the SiteMinder Rule Dialog > Rule Properties screen, select the realm from the drop-down menu.
  2. Configure the remaining screen options as illustrated in the screen illustrations below. 


    SiteMinder Rule Dialog: Rule Properties

Add Policy to Domain

  1. On the SiteMinder Policy Dialog > Policy Properties screen, use the Add/Remove button to select the user group and rule to use.


    SiteMinder Policy Dialog: Policy Properties (Users)


    SiteMinder Policy Dialog: Policy Properties (Rules)

Set Resource Filter

You will also need to protect resources (Default: /soaauthenticationrealm) that Network Director will use when it is authenticating the SSO token. To accomplish this:

  1. Create an SOA authentication realm under the same domain.
  2. Set the resource filter to /soaauthenticationrealm (which will be used later).

    SiteMinder Realm Dialog: Realm Properties

back to top