Symantec Access Management

 View Only
  • 1.  Are CA SSO web agents still constantly being enhanced?

    Posted Mar 23, 2019 05:52 AM

    Dear CA,

     

    Since CA SSO r12.6, there has been no web agent releases that matches that version. I believe it was CA's direction to push everyone towards the CA Access Gateway setup format.

     

    However, some of our clients are resisting the change and want to stick to using classic web agent installation on top of existing Apache HTTPD and/or IIS servers.

     

    We can see that the latest web agents available is r12.52 SP1 CR9a and have tested them to work fine with CA SSO Policy server r12.8

     

    My question is, will these web agents continue to be supported and developed further to keep up with supporting new web server versions? or are we expecting the r12.52 web agent chains to stop here? Knowing answer to this can help us better advise our clients moving forward.

     

    Thank you.

     

    Best regards,

    Zen



  • 2.  Re: Are CA SSO web agents still constantly being enhanced?
    Best Answer

    Broadcom Employee
    Posted Mar 26, 2019 04:25 AM

    Hi Zen,

     

    We're still at the moment developping the Web Agent and adapt them to
    support OS and Web Server. As you can see from our Strategy sheet, the
    next one 12.52SP1CR10 is expected Q2 this year :

     

    CA Single Sign-On (formerly called CA SiteMinder)FixStrategy
    https://support.ca.com/phpdocs/7/5262/5262_fixstrategy.pdf

     

    More, from our Roadmap, you'll see some certification in the pipe already :

     

    CA Single Sign-On Certification Backlog
    https://support.ca.com/phpdocs/7/5262/5262_PlatformSupportRoadmap.pdf

     

    You should note that you won't see any Web Agent version 12.6, 12.7
    nor 12.8. The Web Agent for these version is included in the CA Access
    Gateway (SPS). CA Access Gateway (SPS) is available for 12.6, 12.7 and
    12.8. CA Access Gateway (SPS) includes Web Agent Option Pack and
    Session Linker.

     

    Implementing CA Access Gateway
    https://docops.ca.com/ca-single-sign-on/12-8/en/implementing/implementing-ca-access-gateway

     

    I hope that helps you,

     

    Best Regards,
    Patrick



  • 3.  Re: Are CA SSO web agents still constantly being enhanced?

    Posted Mar 26, 2019 12:58 PM

    Thanks Patrick for the clear explanation



  • 4.  Re: Are CA SSO web agents still constantly being enhanced?

    Broadcom Employee
    Posted Mar 26, 2019 05:20 AM

    Hi Zen,

     

    I don't have any special knowledge,but here is my option on the version #'s of agents : 

     

    The agents are still being advanced and fixed, as fast as they every were.  I think the version numbering of agents is more aimed at an easy transition during the last two years, and backward comparability.   

     

    The policy server releases underwent a bit of a transition to their 64bit releases in the R12.6+ releases - but the agents already had 64bit releases.  Agents released at  the R12.52 SP1 level are comparable with policy servers from : R12.52 Sp1 policy servers all the way to R12.8 policy server.   So by keeping the agent releases at the R12.52 Sp1 stage, there is only one stream of updated webagents to keep track of not several. 

     

    I expect sometime in the future the agent release stream will converge again.  CA SSO Access Gateway is also evolving with it's move to 64bit (in R12.6+) and as it incorporates OpenIDC and other functions - but no I do not think it's a plan to replace all the webagents with Access Gateway.  

     

    Cheers - Mark



  • 5.  Re: Are CA SSO web agents still constantly being enhanced?

    Posted Mar 26, 2019 12:58 PM

    Thanks Mark. Our clients will be satisfied with these responses.