SiteMinder does not support HTTP-Redirect for Remote ACS URLs

[Mohammad Javed]

Dears,

We have one application (SP) which only support the HTTP-Redirect method for accepting the SAML token posted by any IDP (SiteMinder). But since SiteMinder does not support this HTTP-Redirect method anymore for posting the SAML token and will use the other methods, it will not be accepted by the SP. In this Scenario, do we have any solution or any work around to overcome this challenge ?

Your Support on this would be highly appreciated.


Best Regards

[Mohammad Javed]

Dears,

Any leads on this would be really helpful.

Best Regards

[Peter Burant]

Hi Mohammad,

I've never heard of anyone using REDIRECT binding for SAMLResponse (assertion).  Is there a chance you are thinking of ARTIFACT binding?  ARTIFACT binding would result in the browser making a GET request to the SP, however, the GET request will only contain a reference to the assertion (SAMLResponse) that the SP would need to retrieve directly from the IDP via a configured backchannel connection.  ARTIFACT binding is old SAML 1.1 technology and is seldom used today. 

Siteminder IDP supports only POST and ARTIFACT assertion bindings.  I'm not aware of any way to work around this.

Regards,
Pete

[Sreekanth Reddy]

Only POST and ARTIFACT are supported by SAML for sending Response. REDIRECT can't be used.

------------------------------
-- Sreekanth
------------------------------