Not able to create another VIP Authentication hub provider from Siteminder

Products

• VIP Authentication Hub

Issue/Introduction

I am trying to create a new Auth Hub provider which is a vanity URL on the Auth Hub side. When I try to create new provider but I get an error message of saying invalid URL. I do not see any error in the logs.

Environment

Release : Oct.05

Resolution

Currently, SiteMinder expects that URL to be capable of supporting admin operations that SiteMinder needs to create AuthHub policies, etc.

However, the AuthHub vanity ingress does not expose /admin operations, so SiteMinder is unable to access such URL.  SiteMinder's next drop 10 will include support for 2 URLs - Control Plane URL to "manage entities" in AH, and Data Plane URL to "authenticate users" via AH.

Until then, a workaround is to temporarily update the vanity ingress to add the /admin path allowing SiteMinder to use Admin API against AuthHub .

This can be done directly via "kubectl edit ingress".