Siteminder (Single Sign-On) Config - ACO - CA API GW

[Pavansai C]

Hi Community,

Do we actually need "AgentConfigObject - ACO" for configuring siteminder at CA API Gateway end?
If so, how can we make use of it? Please explain!!

[Shawn Ko]

Hi,

I did some POC for CA Siteminder with the CA API Gateway previously.

To my recollection, yes, you require the ACO as the gateway is merely another agent enforcing the policies on siteminder.

Hope that helps.

[Barry Stern]

Hello,


if you are referring to specifying the Agent Configuration Object field in the Check Protected Resource assertion properties then no this is not required. If you do specify it can be leveraged to obtain additional attributes from CA SSO that have been configured as part of the ACO.