Web agent is not setting httponly flag

Products

• CA Single Sign On Secure Proxy Server (SiteMinder)
• CA Single Sign On Agents (SiteMinder)
• CA Single Sign On Federation (SiteMinder)
• CA Single Sign On SOA Security Manager (SiteMinder)
• CA Single Sign-On
• SITEMINDER

Issue/Introduction

We're running a Web Agent Option Pack and we've seen that the Web

agent Option Pack is not setting httponly flag even if we have

configured the ACO for it UseHTTPOnlyCookies.

How can we make it working ?

Environment

Web Agent Option Pack 12.52SP1CR02 on Windows 2012R2;

Resolution

Upgrade the Web Agent Option Pack to at least 12.52SP1CR07 or higher

to get this ACO parameter UseHTTPOnlyCookies implemented.