How can I customize my claim in json web token authentication scheme to use username and passord of a ldap user?

No comment

Hi, In single sign-on authentication with json web token, I use this url https://docops.ca.com/ca-single-sign-on/12-8/en/configuring/policy-server-configuration/authentication-schemes/json-web-token-jwt-authentication-scheme to configure my authentication scheme. But I don’t know how I can customize the look up field dynamiclly to compare the claim with  a ldap username and password.  My goal is to have any user to authenticate using his username and password. Source: New […]

SSO between Applications with different user directories

No comment

Hi, I am really looking for help with SSO between applications with different user directories with below scenarios:   1) We have one application named as Portal which is using Oracle Database for User Authentication and Authorization. 2) We have another set of applications which is using Active Directory for User Authentication and Authorization. 3) […]

Federation url gives 403 error after partnership update

No comment

Hi,   Recently I am facing an issue wherein when I update the partnership in Admin UI the change does not reflect and in turn when accessing the application url it gives 403 error. PFB the logs in FWSTrace,   affwebserv.log:[8612/119647088][Wed Oct 31 2018 04:29:05][SSO.java][ERROR][sm-FedClient-02890] Transaction with ID: 2bac3b3d-7e2e67be-986ddeec-f274e9cc-12de7dce-df failed. Reason: NO_PROVIDER_INFO_FOUND (, , )FWSTrace.log:[10/31/2018][04:29:05][8612][119647088][2bac3b3d-7e2e67be-986ddeec-f274e9cc-12de7dce-df][SSO.java][doGet][SAML2 […]

CA SSO 12.8 WAM UI Registration and Login Flow

No comment

Hello All, Here I have added my scenario on CA SSO 12.8 WAM UI requirement.   1. We have implemented CA SSO 12.8 in AWS environment. Policy server runs under ELB and WAM UI separated from policy server layer due to access restrictions under the layer of policy server. Hence, I have installed and configured […]

RHEL 7.x Apache 2.4.x Webagent not starting

No comment

RHEL 7.x – 64bit Apache 2.4.x – 64bit CA policy server 12.8 SP1 – 64bit CA webagent 12.52 SP1 CR9 – 64bit I have sourced the environment variable . ./ca_wa_env.sh and trying to start webagent with apachectl start or systemctl start httpd.service but this error is coming up httpd: Syntax error on line 56 of /etc/httpd/conf/httpd.conf: Cannot load /opt/CA/webagent/bin/libmod_sm24.so into […]

SmX509CertAuthentication is not working

No comment

Hi,   We’ve CA SSO R12.8 installed on RHEL 7.x(64 bit). Now, we’re setting up SmX509CertAuthentication as per the “Advanced Certificate Authentication for CA Single Sign-On” user guide version 5.2. Guide says –   RHEL 7libSmX509CertAuth.so requires libmp.so.3 to be present on the system for successful loading.To run libSmX509CertAuth.so successfully on RHEL7, we need to create […]

How to implement partnership between ADFS and SSO (IdP)

No comment

Two kinds of users: employees of customer (user1) and external users (user2). When user1 or user2 browses to the “Customer Portal” (CP), CP will redirect them to ADFS. ADFS will find out (Home Realm Discovery) whether this is an internal user (user1) or an external user (user2). Internal users (user1) are authenticated by ADFS using (on-premise […]