Policy Server :: Federation : SAML WCTX Parameter

Products

• CA Single Sign On Secure Proxy Server (SiteMinder)
• CA Single Sign On SOA Security Manager (SiteMinder)
• CA Single Sign-On

Issue/Introduction

Question :

I would like to know the expected value of WCTX parameter so that I could include it in the URL. My Federated application using SAML was working for several months and suddenly it stopped working as the WCTX parameter was missing.

Environment :

All versions

 

Answer :

The WCTX parameter is filled outside SiteMinder and it is bound to ADFS. The WCTX parameter is optional, and if you need it, this is because ADFS has been configured to require it. Usually, this parameter has an URL. But this is specific to your architecture, and we have no way to tell you the value it should have. According to Microsoft, the value looks like something as "context data such as a return URL that will be propagated among the different parties" :

http://msdn.microsoft.com/en-us/library/ff359114.aspx

Consult the ADFS vendor documentation to get further precisions on this.

Please note also that WS-FED protocol does not support Account Partner initiated Federation :

(http://social.msdn.microsoft.com/Forums/en-US/Geneva/thread/406430e8-1f3d-451a-aa8f-f192d9d8ca3f/)

Environment

Release:
Component: SMFSS