Configuring SAML to Send Different Recipient URL

Products

• CA Single Sign On Secure Proxy Server (SiteMinder)
• CA Single Sign On Federation (SiteMinder)
• SITEMINDER

Issue/Introduction

When we do a SAML Assertion post to an SP we see that the Recipient URL populates whatever we have for the ACS URL. And we are trying to change that and send a different URL as per a customer requirement.  How do we accomplish this?

Environment

Release : ALL

Component : SITEMINDER -FEDERATION

Resolution

Out of the box the SAML Recipient attribute will always be set to the same value as the ACS URL. To alter this, you would need to code a custom AGP (Assertion Generator Plugin).

Additional Information

A sample AGP is included with the Federation SDK.  This serves as a good starting point/template for customers to develop their own AGP.
ACS = Assertion Consumer Service