Author Archive

we are using CA SSO Access Gateway to provide federation. Is there any way it can differentiate between the mobile or web browser traffic.   If yes then please suggest how ? Source: New feed {pubDate}

Hi, I’m new to Access Gateway. My Access Gateway is installed on machine SERVER1.domain. The federation authentication URL now is https://server1.domain/affwebservices/redirectjsp/redirect.jsp From outside world I want to use somethig like https://www.idp.company.com/affwebservices/redirectjsp/redirect.jsp So I think I have to create a Virtualhost for www.idp.company.com with a SSL certificate. I’ve create a IP-address on SERVER1.domain.   Can anybody tell […]

We have requirement for a customer that they would like to have a new session for each browser tab, Below is the scenario.   1 User open 3 tabs in a browser 2 First tab user logs into SSO protected application after successful LDAP Authentication 3 Close First tab 4 Second tab user access the […]

Basic password services integration with Active Directory: How do I show user your password is expiring notice? I have enabled “Issue expiration warning for days” but user just authenticates and I don’t see any authreasoncode 18 in the process to show user a warning on next screen. How do I capture this?   Does agent […]

This might be a silly question but here it goes. Currently we are working on moving our FWS system from windows boxes to RHEL7 boxes. If I modify the AffWebServices.properties file with the webagent.conf path for the REHL7 boxes and create a new WAR file using the WAOP on the windows box, can I take that […]

Hello there,   I see lot of below searches in Policy Store log coming from Policy server (R12.52). Any idea why such search happening, the reason is,  this search is simply using filter objectclass=xpsObject and hence we see lot of unindex searches in Policy store. We can tune the policystore to accomodate this filter but […]

Our application is using Request.Headers[HeaderIdentifier] rather than Request.ServerVariables[HeaderIdentifier] is this a security hole?   We are using .Net platform, we receive the request back from Siteminder and use  Request.Headers[HeaderIdentifier] to retrieve the authenticated user, is this a back door? Should we only use Request.ServerVariables[HeaderIdentifier]? Does Siteminder write to the Request.ServerVariables for custom headers? Source: New feed {pubDate}

Once we receive a response back from Siteminder with a custom header (we are using .Net) we then get the header information by doing Request.Headers[HeaderIdentifier] would doing this allow for a back door? Should we use Request.ServerVariables[HeaderIdentifier] does Siteminder write this custom header to Request.ServerVariables? Source: New feed {pubDate}