HTTP server error 500 returned after Siteminder authentication and authorization

Products

• CA Single Sign On Secure Proxy Server (SiteMinder)
• CA Single Sign On SOA Security Manager (SiteMinder)
• CA Single Sign-On

Issue/Introduction

 

Upon accessing Single Sign-On (Siteminder) protected resources hosted on IIS, user is getting HTTP Server Error 500 after successful authentication and authorization.

  

 

 

Environment

Release: ESPSTM99000-12.51-Single Sign On-Extended Support Plus
Component:

Cause

 

• Siteminder Web Agent logged a successful Siteminder authentication and authorization, but not the HTTP Server Error 500.
• Web.config file (residing under the protected resource’s physical folder) registered missing partial pre-condition with the Siteminder Web Agent ISAPI filter:

<filter name="SiteMinder Agent" path="D:\Program Files\CA\webagent\win64\bin\ISAPI6WebAgent.dll" enabled="true" enableCache="false" preCondition="bitness64" /> 
 

Resolution

 

Ensure that 32-bit or 64-bit Siteminder Web Agent ISAPI filter is defined in the web.config file accordingly, with the following format:
<filter name="SiteMinder Agent" path="C:\CA\webagent\win64\bin\ISAPI6WebAgent.dll" enabled="true" preCondition="classicMode,bitness64" />


<filter name="SiteMinder Agent-32" path="C:\CA\webagent\win32\bin\ISAPI6WebAgent.dll" enabled="true" preCondition="classicMode,bitness32" />

Additional Information

This has been incorporated into the documentation. Please visit 
docops.ca.com for your version for updated information
 

https://techdocs.broadcom.com/us/en/symantec-security-software/identity-security/siteminder/12-8/troubleshooting/iis-agent-troubleshooting.html