How to return Siteminder Policy server name or ip address on log ?

Products

• CA API Gateway

Issue/Introduction

There are 2 siteminder policy servers (ex: server01, server02) configured in the CA API Gateway Single Sign on properties under the cluster settings.

In the log, how can the gateway return which policy server is being hit when a policy is called as the two policy servers are load balanced?

Using the context variable ${siteminder.smcontext.sourceIpAddress} but it is returning where request is hitting. 

Are there any attributes to return Siteminder policy server details like IP address or host name? 

 

Environment

API Gateway 9.4, 10.x , 11.x

Resolution

Currently, there is no way to log or capture the Policy Server used during a Single SignOn call. The standard apache or other webagent does not log the Policy Server details which it is communicating with.  

From the Gateway, it's not possible to log Policy Server information since you need to get the info across the TLI (Transport Layer Interface) layer but the regular agents in SSO do not provide this info.