search cancel

Authentication chaining issue

book

Article ID: 189739

calendar_today

Updated On:

Products

CA Single Sign On Secure Proxy Server (SiteMinder) CA Single Sign On Agents (SiteMinder) CA Single Sign On Federation (SiteMinder) CA Single Sign On SOA Security Manager (SiteMinder) SITEMINDER

Issue/Introduction

We have started configuring the Authentication Chain authentication scheme template as according to the available Broadcom/CA SiteMinder documentation.

Namely, we have configured two separate authentication schemes, one IWA and one HTML form. Both work individually.

When we place them into a chain, NTLM fails without exception and we do not receive the form-based authentication scheme.

Could you also please provide instructions as to the deployment of custom .fcc's onto CA Access Gateway?

Environment

Release : 12.8

Component : SITEMINDER -WEB AGENT FOR APACHE

Resolution

The ntlm and fcc were not on the same machine and It is the root-cause behind the issue. This will be resolved once the ntlm and fcc will be on other machines.