VIP Auth Hub - Which components of SiteMinder needs connectivity to VIP Auth Hub URL during SiteMinder integration?

Products

• VIP Authentication Hub

Issue/Introduction

We are seeing connection timeout error on SiteMinder WAM UI when adding a VIP Auth Hub provider. Does SiteMinder policy servers needs to connect to VIP Auth Hub URL on port 443? What components of SiteMinder should have connectivity to the VIP Auth Hub URL for this integration? 

Environment

Siteminder 12.8.07

AuthHub 2.2

Resolution

The SiteMinder Access Gateway does front-end VIP Authentication Hub and SiteMinder Access Gateway needs to connect to VIP Authentication Hub for MFA flows.

The SiteMinder Admin UI also need to connect to VIP Authentication Hub, but that's only for reconfiguration of VIP Authentication Hub in the Admin UI.