UseHTTPOnlyCookies for httponly flag no set in Web Agent Option Pack

Products

• CA Single Sign On Secure Proxy Server (SiteMinder)
• CA Single Sign On Agents (SiteMinder)
• CA Single Sign On Federation (SiteMinder)
• CA Single Sign-On
• SITEMINDER

Issue/Introduction

When running a Web Agent Option Pack, this one don't set the httponly flag, even if the ACO for it UseHTTPOnlyCookies has been configured.

 

Environment

Web Agent Option Pack 12.52SP1CR02 on Windows 2012R2;

 

Resolution

Upgrade the Web Agent Option Pack to at least 12.52SP1CR07 or higher, to get this ACO parameter UseHTTPOnlyCookies implemented (1).

 

Additional Information

 

1. Safeguard Cookie Information with the HTTP-Only Attribute