Since CA SSO r12.6, there has been no web agent releases that matches that version. I believe it was CA's direction to push everyone towards the CA Access Gateway setup format.
However, some of our clients are resisting the change and want to stick to using classic web agent installation on top of existing Apache HTTPD and/or IIS servers.
We can see that the latest web agents available is r12.52 SP1 CR9a and have tested them to work fine with CA SSO Policy server r12.8
My question is, will these web agents continue to be supported and developed further to keep up with supporting new web server versions? or are we expecting the r12.52 web agent chains to stop here? Knowing answer to this can help us better advise our clients moving forward.
We're still at the moment developping the Web Agent and adapt them tosupport OS and Web Server. As you can see from our Strategy sheet, thenext one 12.52SP1CR10 is expected Q2 this year :
CA Single Sign-On (formerly called CA SiteMinder)FixStrategy https://support.ca.com/phpdocs/7/5262/5262_fixstrategy.pdf
More, from our Roadmap, you'll see some certification in the pipe already :
CA Single Sign-On Certification Backlog https://support.ca.com/phpdocs/7/5262/5262_PlatformSupportRoadmap.pdf
You should note that you won't see any Web Agent version 12.6, 12.7nor 12.8. The Web Agent for these version is included in the CA AccessGateway (SPS). CA Access Gateway (SPS) is available for 12.6, 12.7 and12.8. CA Access Gateway (SPS) includes Web Agent Option Pack andSession Linker.
Implementing CA Access Gateway https://docops.ca.com/ca-single-sign-on/12-8/en/implementing/implementing-ca-access-gateway
I hope that helps you,
I don't have any special knowledge,but here is my option on the version #'s of agents :
The agents are still being advanced and fixed, as fast as they every were. I think the version numbering of agents is more aimed at an easy transition during the last two years, and backward comparability.
The policy server releases underwent a bit of a transition to their 64bit releases in the R12.6+ releases - but the agents already had 64bit releases. Agents released at the R12.52 SP1 level are comparable with policy servers from : R12.52 Sp1 policy servers all the way to R12.8 policy server. So by keeping the agent releases at the R12.52 Sp1 stage, there is only one stream of updated webagents to keep track of not several.
I expect sometime in the future the agent release stream will converge again. CA SSO Access Gateway is also evolving with it's move to 64bit (in R12.6+) and as it incorporates OpenIDC and other functions - but no I do not think it's a plan to replace all the webagents with Access Gateway.
Cheers - Mark
Thanks Patrick for the clear explanation
Thanks Mark. Our clients will be satisfied with these responses.