Authentication chaining issue

Products

• CA Single Sign On Secure Proxy Server (SiteMinder)
• CA Single Sign On Agents (SiteMinder)
• CA Single Sign On Federation (SiteMinder)
• CA Single Sign On SOA Security Manager (SiteMinder)
• SITEMINDER

Issue/Introduction

We have started configuring the Authentication Chain authentication scheme template as according to the available Broadcom/CA SiteMinder documentation.

Namely, we have configured two separate authentication schemes, one IWA and one HTML form. Both work individually.

When we place them into a chain, NTLM fails without exception and we do not receive the form-based authentication scheme.

Could you also please provide instructions as to the deployment of custom .fcc's onto CA Access Gateway?

Environment

Release : 12.8

Component : SITEMINDER -WEB AGENT FOR APACHE

Resolution

The ntlm and fcc were not on the same machine and It is the root-cause behind the issue. This will be resolved once the ntlm and fcc will be on other machines.