Error: SMSESSION cookie - mismatched SSOZone 'SMSESSION' in Web Agent

Products

• SITEMINDER

Issue/Introduction

 

When configuring API Gateway with the Siteminder connector, once the browser gets the SMSESSION cookie, the next request to a Web Agent fails. The Web Agent reports an error:

WebAgent.log:

  [06/29/2022][12:45:33][27313][2917165184][CSmHttpPlugin.cpp:6579][CSmHttpPlugin::ProcessSessionCookie]
  [0000000000000000000000006813a60a-6ab1-62bc2d4d-ade06880-34a3ee36bb0][10.166.19.106][][webagent]
  [/siteminderagent/forms/logoff.fcc][][SMSESSION cookie - mismatched SSOZone 'SMSESSION'.]

 

Environment

 

  Policy Server 12.8SP6a;
  Session Store on MSSQL; 
  Web Agent 12.52SP1;

 

Resolution

 

• Modify the API Gateway ACO to set:
  
  SSOZoneName = SM

• Modify the Web Agent ACO to set:
  
  SSOZoneName --> SM
  
  

  Then calling the login in API Gateway and then accessing the Web Agent protected resource will work as expected. The logoff URI will work too.