HTTP server error 500 returned after Siteminder authentication and authorization

Products

• CA Single Sign On Secure Proxy Server (SiteMinder)
• AXIOMATICS POLICY SERVER
• CA Single Sign On SOA Security Manager (SiteMinder)
• CA Single Sign-On

Issue/Introduction

 

Upon accessing Single Sign-On (Siteminder) protected resources hosted on IIS, user is getting HTTP Server Error 500 after successful authentication and authorization.

  

 

 

Cause

 

• Siteminder Web Agent logged the successful Siteminder authentication and authorization, but not the HTTP Server Error 500.
• Web.config file (residing under the protected resource’s physical folder) registered missing partial precondition with the Siteminder Web Agent ISAPI filter:

<filter name="SiteMinder Agent" path="D:\Program Files\CA\webagent\win64\bin\ISAPI6WebAgent.dll" enabled="true" enableCache="false" preCondition="bitness64" /> 
 

Environment

Release: ESPSTM99000-12.51-Single Sign On-Extended Support Plus
Component:

Resolution

 

Ensure that 32-bit or 64-bit Siteminder Web Agent ISAPI filter is defined in the web.config file accordingly, with the following format:
<filter name="SiteMinder Agent" path="C:\CA\webagent\win64\bin\ISAPI6WebAgent.dll" enabled="true" preCondition="classicMode,bitness64" />


<filter name="SiteMinder Agent-32" path="C:\CA\webagent\win32\bin\ISAPI6WebAgent.dll" enabled="true" preCondition="classicMode,bitness32" />

Additional Information

This has been incorporated into the documentation. Please visit 
docops.ca.com for your version for updated information