Siteminder Web Agent is setting an SMSESSION cookie despite being configured to use SSO Zones

Products

• SITEMINDER

Issue/Introduction

The Siteminder Agent Configuration Object (ACO) has been configured to use SSO Zones, however the Agent is still setting an SMSESSION cookie rather than using the SSO Zone name instead. 

Environment

PRODUCT: Siteminder

COMPONENT: Policy Server

VERSION: ANY

OPERATING SYSTEM: ANY

Cause

This issue can occur if there is a space accidentally placed in the SSOZoneName attribute name in the ACO.  This will appear in the Policy Store export as

<StringValue>SSOZoneName     =2={ZoneName}</StringValue>

Resolution

1) Launch the Siteminder AdminUI

2) Edit the Agent Configuration Object (ACO)

3) Delete the "SSOZoneName" ACO attribute

4) Submit the changes to the ACO

5) Edit the ACO and add the 'SSOZoneName' ACO attribute and value

6) Submit the changes to the ACO

7) Export the Agent Configuration Object

XPSExport <FileName>.xml -xo <ACO XID> -npass

8) Review the 'SSOZoneName' attribute to make sure there are no longer any space in the string value.

<StringValue>SSOZoneName=2={ZoneName}</StringValue>