Symantec Access Management

 View Only
  • 1.  Handling POSTPRESERVEDATA in HTML login page

    Posted Jun 13, 2019 04:25 AM
    Hi,

    I needed to change my current login FCC page into a HTML page because my post action is login_uid.fcc when a user enters his UID or login_mail.fcc when the user enters his emailaddress.

    The current FCC handles the postpreservedata by passing it in a hidden input  <input type="hidden" name="postpreservationdata" value="$$postpreservationdata$$">. This construction cannot be used in a HTML anymore.
    How must this be resolved in a HTML?
    Because the login pages (FCC and HTML) are on the CA Access Gateway directory ../examples/siteminderagent/forms I needed to change the http.conf to make it possible to use a HTML login page.
    In case it is not possible to use a HTML login page with POSTPRESERVEDATA support, how can I use a JSP file instead? What do I need to chang in the httpd.conf to allow JSP login pages? An example JSP file would be very nice.

    Regards


  • 2.  RE: Handling POSTPRESERVEDATA in HTML login page
    Best Answer

    Broadcom Employee
    Posted Jun 14, 2019 02:39 AM
    Hi Edwin,

    At glance, you might check to have a front end html authentication
    scheme, that will post the data to a specific fcc.

    Establish a Front-End Authentication Scheme

    The front-end authentication scheme uses the Forms Credential
    Collector (FCC), selectlogin.fcc, to generate the login selection
    screen that is used to request access to the protected resource. The
    FCC dynamically constructs the FCC directives for the agent so the
    agent can redirect the user as appropriate for any of the
    authentication scheme choices.

    https://docops.ca.com/ca-single-sign-on/12-8/en/configuring/policy-server-configuration/strong-authenticationcredentials-selector/establish-a-front-end-authentication-scheme

    May have others engineer different solution as well.

    Hope that helps,

    Best Regards,
    Patrick