HCO RequestTimeout: Anecdotes, Rules of Thumb

No comment

I’m going to ask the question posed in RequestTimeout in a different way… I’m working in a large environment that is periodically experiencing heavy loads. The referenced post suggests dodges the value of RequestTimeout and suggests adding more policy servers.  Realizing it’s not possible to recommend an optimal value of RequestTimeout to suit all situations, I would […]

smlocale & other CA SSO cookie

No comment

Hi, I am trying to get a complete understanding of understand the use of smlocale & other ca sso cookies and its uses.It will be very helpful if you can point me in the right direction.   Thanks, Saif Source: New feed {pubDate}

SM 12.7 AD memberof

No comment

Hi,   I have a response with <%userattr=”memberof” %> Pulled out AD of user group1^group2^group3^ The user has 20 groups.  It works perfectly in SM 12.0x environment. But when we move to 12.7 environment. Only 1 group is pulled out. Sometimes no group is pulled out.   Is it a known problem? Is it a configuration […]

SPS is adding an extra trailing string after authentication

No comment

I am trying to configure SPS and currently the flow isn’t working correctly. Let’s use frontend.com and backend.com/target for this example.   Proxy rules is … <nete:proxyrules xmlns:nete=”http://frontend.com“><nete:forward>http://backend.com/target$0</nete:forward>   1.User types in frontend.com/ and login page is served as expected showing frontend.com/siteminderagent/forms/… 2. User successfully authenticates and is forwarded … but we receive a 404 […]

Siteminder with IIS and Custom AD Domain Application pool account

No comment

Hello, We are trying to apply Siteminder/Single-SignOn to an existing web/.net application running on IIS and running under a custom domain Active Directory Windows account as the AppPool identity (integrated pipeline mode). The Siteminder webagent setup is done to our knowledge, however we find that the application breaks at the first SQL command execution, with […]

Skip Siteminder for HTTP Response Options

No comment

Team,   Is there a way where we can skip Siteminder actions, from a Web Agent to all the way to a Policy Server, for HTTP Responses like Options. We would like to find out if we can Protect a Resource, for a Get, Post and Put Response, in a Rule but for Options, it […]

Advanced Password Policies using SHA-1 dictionaries

No comment

Dear CA SSO-Team, we want to strengthen the security of our CA IDM / CA SSO environment by introducing advanced password policies.   We want to utilize a dictionary of real world passwords previously exposed in data breaches. These real exposed passwords are supplied by https://haveibeenpwned.com/Passwords as a ZIP file containing the SHA-1 hashes of […]