Failed to initialize authentication scheme 'Kerberos-pp

No comment

I have followed all the documents mentioned in this community. KVNO = Matches KRB5_CONFIG = variable is set in .bash_profile krb5.conf/ini is configured as per the document with all the required parameters Auth Scheme is set with smps/FQDN@domain HTTPPrincipal is set with HTTP/FQDN@domain smpsprincipal is set with smps@FQDN   Realms,Rules and policies are set.   […]

/siteminderagent/ntlm/creds.ntc stuck on IWA

No comment

Hi, I configured IWA authentication in Windows 2016 IIS 10, as the other coments says I configured IIS and tested with the SiteMinder Agent 12.52 sp1 cr8. If i disable the webagent I can access my page authenticated sucessfully by IIS, I tested even with a SDM 17 that displays the user that was authenticated […]

Multivalue attribute wants to send as comma separated

No comment

Hi, I have to send the attribute value as comma separate group. Use case is: If user is part of two groups those group name has to be send in the attribute value. I tried this expression but getting the same expression in the attribute value. TRANSLATE((Filter(ENUMERATE(Get(‘isMemberOf’), STRING(RDN(STRING(%0), TRUE))),’*’)),’^,’,’) Output should be as below: <ns2:Attribute […]

Case insensitive for NameId search

No comment

We have CA r12.52 SP1 CR09 Policy Server acting as SP. User Directory is Oracle FFOr user identification we are using NameID and in the ODBC Search Specification we have EMAIL_ADD_NM=%s   How to make this search case insensitive? I have tried EMAIL_ADD_NM=UPPER (%s) and few other combinations but it doesn’t work.   Is it possible out of […]

UPGRADE CA Single Sign-on 12.52 to 12.8

No comment

Hi all.,     I have a question about the policy store upgrade. Is there any way to get evidence of the policy Store upgrade (version or something else)?    I tried for XPSConfig but I did not find anything that could help me.   Thank you. Source: New feed {pubDate}

Multiple realms vs multiple rules with single realm

No comment

What’s the best way to protect multiple resources under single domain? Create separate realm for each resource and allow rule with get/post (separate realm to protect “/test/abc” and “/test/xyz”) or single realm with base protected and creating multiple rules under it (create one realm “/test” and 2 rules with /abc* and /xyz*)   Note: We […]

Delete a partnership

No comment

I have multiple partnerships which has same Local entitiy id and remote entity id. Only 1 of the partnership is active. When i try to delete the partnership i get error as it tries to delete the Local Entity id too.   Is there any way to delete the partnership when the entity id is in use by […]