Access Gateway 12.8 SP04 target URI hiding

Products

• CA Single Sign On Secure Proxy Server (SiteMinder)
• CA Single Sign On Agents (SiteMinder)
• CA Single Sign On Federation (SiteMinder)
• CA Single Sign On SOA Security Manager (SiteMinder)
• SITEMINDER

Issue/Introduction

 

We're running a CA Access Gateway (SPS) and we'd like to know if
there's a way to hide the URI part of a protected URL ?

To illustrate :

http://myserver.mydomain.com/myapp

so we'd like the SPS to hide the /myapp in the URL.

 

Environment

 

CA Access Gateway (SPS) 12.8SP4 on RedHat 7

 

Resolution

 

At first glance, CA Access Gateway (SPS) doesn't offer such
functionality.

You may be able to acheive this by implementing a Custom Filter in CA
Access Gateway (SPS) :

  How Access Gateway Processes Custom Filters

    The Filter API provides a method for developers to insert processing
    before a request is passed to a destination server, as described in
    step 2 of the preceding process, or after the response from the
    destination server is returned to the Access Gateway as described in
    step 3 of the preceding process, but before the resource is passed
    to the user.

  https://techdocs.broadcom.com/us/en/symantec-security-software/identity-security/siteminder/12-8/programming/ca-access-gateway-apis.html

More, this seems to be something complex to implement, as the browser
needs to know the URI part to send the request. One way to achieve
this might be at the application level, where using ajax call (which
are not following the HTTP protocol), makes site interaction when
conserving always the same url as described here :

  URL Masking

    The most common method for achieving this, interestingly, is with
    Ajax, where the main index page never changes but the content on
    that page is swapped out asynchronously via JavaScript.

  https://devcentral.f5.com/s/question/0D51T00006i7XRdSAM/url-masking