Possible ways of using device DNA

[Anon Anon]

Siteminder version :12.52
Use Cases or documentation on how to use Device DNA

[Ujwol]

Hi Rajkiran,

Please go through this:

https://communities.ca.com/community/ca-security/blog/2016/08/04/tech-tip-ca-single-sign-on-policy-serverhow-to-configure-enhanced-session-assurance

If you have any further questions, please let me know.

Cheers,

Ujwol

[Ujwol]

Also have a look at this :

https://youtu.be/S0Atd_JFML0

[Anon Anon]

Ujwol,

 

Thank you for the link it has all the steps, I will go-through and let you know if I have any road blocks.

[Anon Anon]

Ujwol,

 

I found one of the link from CA bookshelf regarding the Device DNA.

https://support.ca.com/cadocs/0/CA%20SiteMinder%2012%2052-ENU/Bookshelf_Files/HTML/idocs/index.htm?toc.htm?session_assurance_new.html

On the limitations drop down list it clearly says that it will not be supported with the partnership model. 
can you provide more info

Thanks

[Ujwol]

Yes, there are certain scenario where session assurance is not supported, and following partnership federation use case is one of them:

 

CA SiteMinder® Federation

The following configurations do not support Enhanced Session Assurance with DeviceDNA™:

• The SP side of a SAML 2.0 partnership.
• SAML 2.0 HTTP-POST binding on the IdP side of a partnership.

 

What details are you looking for here ?

[Anon Anon]

We are currently working on integrating Facebook through partnership model and we came across  Device DNA and throught it would be very much handy.

[Anon Anon]

Siteminder 12.52 SP1 CR5
Using OAuth 2.0 from the partnership entities