Custom Login Page using SiteMinder SDK

[Anon Anon]

I have a web application that will be  protected by SiteMinder.   I would like to use the existing login page for my web application.   I've seen examples where  the user credential submitted via a  POST to the login.fcc.   I would like to submit the information directly to the SiteMinder Policy Server for a response without performing a POST to the login.fcc.    I am new to Java and the SiteMinder SDK.   I am interested in leveraging the SiteMinder APIs for user authentication.   Can I just use the SM Authentication API in my application to do this?   How would I specify the Policy server settings in the API?     Thanks in advance.  Message Edited by aphuynhla on 08-12-2009 01:37 PM [left]

[AaronBerman]

if you just want to use an existing login page, why not just edit the login page itself so that the form within the login page posts to the login.fcc?   There are a few parameters that can be retrieved from the query string (like target, smagentname, etc) and then you have the username and password.  This will save you from having to write an entire new agent to send credentials to the policy server, not to mention enabling the EnableTPCookie setting on each of the web agent  ACO.      For example, I often use an ASP or JSP page for my login page that posts to the FCC.   I find that this gives me some flexibility.  the form in my ASP often reads like:                   
            ">
            ">
            ">
            ">

[Anon Anon]

Is it necessary to create a new agent everytime you want to use the siteminder java APIs?  Is there a way to send the information directly to the Policy Server (or to the agent) without having to create a new agent?  

[AaronBerman]

The "create a new user session" is part of the agent API, so the API calls need to connect back to the Policy Server.   There are other APIS that dont require this sort of connection, but they dont offer the functionality to create a user session.

[Anon Anon]

Hi,  I am new to siteminder and do not know where to get this information. I am trying to submit a form post to login.fcc but I would like to know about some values that you provided above:  What is smquerydata, smauthreason and postpreservationdata?  The smagentname I believe is the smagentname that will be handling the request?  Thanks,Osiris  

[AaronBerman]

Those are all hidden elements in the login page that get posted back to the siteminder login.fcc page.    The default login.fcc page reads these parameters out of the query string and inserts them into the hidden form elements using the $$ $$ syntax, and the web agent makes the substitutions automatically when a HTTP GET request is used to access the FCC.    If you use something other than a FCC page for your login page (ASP, JSP, servlet, PERL, etc.), then it is your responsibility to read these parameters out of the query string, put them into hidden elements of the login page, then post the entire form to the FCC.  I like using ASP or JSP, so these parameters get filled out prior to the page being returned to the browser.    

[Anon Anon]

Hi AB,  So, when using something other than the  FCC page(JSP,HTML, etc.) to POST the credentials, would you have to change the login.fcc page?  I ask this because I was wondering how the login.fcc would know when to automatically submit its form to SiteMinder when a  request via POST was received -- as opposed to how the login.fcc would know not to submit the form when a user needs to provide the information.  The login.fcc page can be updated with JavaScript,  which can submit the page automatically. I was wondering if SiteMinder had its own method of doing this.  Thanks,Osiris

[AaronBerman]

FCC are actually interperted by the webagent code, so when you do a POST to the FCC you are not actually ever posting directly to the file, instead when the Agent sees a POST to a file type of FCC, it reads the @ configuration parameters in the top of the FCC file and then sends the data back to the Policy server in an IsAuthenticate call.    When you make a GET request to a FCC, the webagnet ignores the @ parameters and displays the HTML, but interprets the $$

[Ujwol]

Hi Aaron,

 

I am not sure what web agent version are you referring to here, but I just tested with few agent version and doesn't seem to be working if I post to non-existing fcc page from a custom login page..

Here is what I have in my custom login page :

 

<form NAME="Login" ACTION="x.fcc" METHOD="POST">

 

R12.52SP1CR5

 

[03/24/2017][11:30:17][4764][3924][SmFCC.cpp:2786][SmFcc::getLocalePath][000080fe00000000ff420000bd40edfe-129c-58d4b5f1-0f54-016c4823][*127.0.0.1][][][][][Localized Path = C:\Program Files\CA\webagent\win64\samples\forms\x.fcc, working locale = default]
[03/24/2017][11:30:17][4764][3924][CSmFormTemplateObj.cpp:224][CSmFormTemplateObj::LoadFormTemplate][][][][][][][No such file or directory]
[03/24/2017][11:30:17][4764][3924][CSmFormTemplateCache.cpp:171][CSmFormTemplateCache::GetForm][][][][][][][Unable to serve form template 'C:\Program Files\CA\webagent\win64\samples\forms\x.fcc' from disk.]
[03/24/2017][11:30:17][4764][3924][SmFCC.cpp:1336][SmFcc::setup][000080fe00000000ff420000bd40edfe-129c-58d4b5f1-0f54-016c4823][*127.0.0.1][][][][][Unable to process form C:\Program Files\CA\webagent\win64\samples\forms\x.fcc.]
[03/24/2017][11:30:17][4764][3924][CSmResourceManager.cpp:207][CSmResourceManager::ProcessAdvancedAuthResource][000080fe00000000ff420000bd40edfe-129c-58d4b5f1-0f54-016c4823][*127.0.0.1][][][][][SM_WAF_HTTP_PLUGIN->ProcessAdvancedAuthResource returned SmExit.]
[03/24/2017][11:30:17][4764][3924][CSmHighLevelAgent.cpp:1003][ProcessAdvancedAuthentication][000080fe00000000ff420000bd40edfe-129c-58d4b5f1-0f54-016c4823][*127.0.0.1][][][][][ResourceManager returned SmExit, end new request.]

 

R12SP3CR12

 

[03/24/2017][11:30:17][4764][3924][SmFCC.cpp:2786][SmFcc::getLocalePath][000080fe00000000ff420000bd40edfe-129c-58d4b5f1-0f54-016c4823][*127.0.0.1][][][][][Localized Path = C:\Program Files\CA\webagent\win64\samples\forms\x.fcc, working locale = default]
[03/24/2017][11:30:17][4764][3924][CSmFormTemplateObj.cpp:224][CSmFormTemplateObj::LoadFormTemplate][][][][][][][No such file or directory]
[03/24/2017][11:30:17][4764][3924][CSmFormTemplateCache.cpp:171][CSmFormTemplateCache::GetForm][][][][][][][Unable to serve form template 'C:\Program Files\CA\webagent\win64\samples\forms\x.fcc' from disk.]
[03/24/2017][11:30:17][4764][3924][SmFCC.cpp:1336][SmFcc::setup][000080fe00000000ff420000bd40edfe-129c-58d4b5f1-0f54-016c4823][*127.0.0.1][][][][][Unable to process form C:\Program Files\CA\webagent\win64\samples\forms\x.fcc.]
[03/24/2017][11:30:17][4764][3924][CSmResourceManager.cpp:207][CSmResourceManager::ProcessAdvancedAuthResource][000080fe00000000ff420000bd40edfe-129c-58d4b5f1-0f54-016c4823][*127.0.0.1][][][][][SM_WAF_HTTP_PLUGIN->ProcessAdvancedAuthResource returned SmExit.]
[03/24/2017][11:30:17][4764][3924][CSmHighLevelAgent.cpp:1003][ProcessAdvancedAuthentication][000080fe00000000ff420000bd40edfe-129c-58d4b5f1-0f54-016c4823][*127.0.0.1][][][][][ResourceManager returned SmExit, end new request.]

 

Regards,

Ujwol Shrestha