ALERT: Some images may not load properly within the Knowledge Base Article. If you see a broken image, please right-click and select 'Open image in a new tab'. We apologize for this inconvenience.

HTTP server error 500 returned after Siteminder authentication and authorization


Article ID: 33279


Updated On:


CA Single Sign On Secure Proxy Server (SiteMinder) CA Single Sign On SOA Security Manager (SiteMinder) CA Single Sign-On



Upon accessing Single Sign-On (Siteminder) protected resources hosted on IIS, user is getting HTTP Server Error 500 after successful authentication and authorization.






  • Siteminder Web Agent logged the successful Siteminder authentication and authorization, but not the HTTP Server Error 500.
  • Web.config file (residing under the protected resource’s physical folder) registered missing partial precondition with the Siteminder Web Agent ISAPI filter:
<filter name="SiteMinder Agent" path="D:\Program Files\CA\webagent\win64\bin\ISAPI6WebAgent.dll" enabled="true" enableCache="false" preCondition="bitness64" /> 


Release: ESPSTM99000-12.51-Single Sign On-Extended Support Plus



Ensure that 32-bit or 64-bit Siteminder Web Agent ISAPI filter is defined in the web.config file accordingly, with the following format:
<filter name="SiteMinder Agent" path="C:\CA\webagent\win64\bin\ISAPI6WebAgent.dll" enabled="true" preCondition="classicMode,bitness64" />

<filter name="SiteMinder Agent-32" path="C:\CA\webagent\win32\bin\ISAPI6WebAgent.dll" enabled="true" preCondition="classicMode,bitness32" />

Additional Information

This has been incorporated into the documentation. Please visit for your version for updated information