ALERT: Some images may not load properly within the Knowledge Base Article. If you see a broken image, please right-click and select 'Open image in a new tab'. We apologize for this inconvenience.

Configuring SAML to Send Different Recipient URL

book

Article ID: 199216

calendar_today

Updated On:

Products

CA Single Sign On Secure Proxy Server (SiteMinder) CA Single Sign On Federation (SiteMinder) SITEMINDER

Issue/Introduction

When we do a SAML Assertion post to an SP we see that the Recipient URL populates whatever we have for the ACS URL. And we are trying to change that and send a different URL as per a customer requirement.  How do we accomplish this?


Environment

Release : ALL

Component : SITEMINDER -FEDERATION

Resolution

Out of the box the SAML Recipient attribute will always be set to the same value as the ACS URL. To alter this, you would need to code a custom AGP (Assertion Generator Plugin).

Additional Information

A sample AGP is included with the Federation SDK.  This serves as a good starting point/template for customers to develop their own AGP.
ACS = Assertion Consumer Service