Symantec SiteMinder

In this blog we will discuss about the steps required to display various login related error message in the login page when using the FCC form authentication

• Configure OnAuthAttempt response to set ErrorMsg cookie with value "User Not Found".

• Configure OnAuthReject response to set ErrorMsg cookie with value "Wrong password. Try again."

• Configure OnAuthAccept response to expire the ErrorMsg cookie on successful authentication.

• Associate these Responses with the respective rules.

• Create an HTML FORMS authentication scheme using customlogin.fcc

• Save the attached customlogin.fcc in the <webagent>/samples/forms/ directory
• Restart web server.

Note : In order for web agent to do 302 redirect to back to the login page and to be able to read the error message cookie, the display login form and form being posted to needs to be different.

i.e you need to provide a different FCC form in the FORM ACTION field.

In this example, our login page is customlogin.fcc but instead of posting it to self , it is posting to the OOTB login.fcc

<form NAME="Login" ACTION="/siteminderagent/forms/login.fcc" METHOD="POST">

Testing:

• Invalid User ID

• Invalid credential

• Successful Authentication

Attachment:

• customlogin.fcc
• logingerror.saz