Service Desk Manager SAML Integration using Siteminder as Identity Provider is Failing
Article ID: 375484
Updated On:
Products
Issue/Introduction
When trying to configure SAML Authentication for SDM using Siteminder as the IDP, we are encountering the following errors in jsrvr.log:
06/24 08:32:18.073 [https-jsse-nio-8443-exec-7] ERROR SamlTokenValidator 411 Now is: 1719235938073
06/24 08:32:18.073 [https-jsse-nio-8443-exec-7] ERROR SamlTokenValidator 412 skew is: 180000
06/24 08:32:18.073 [https-jsse-nio-8443-exec-7] DEBUG pdmweb 526 Status start code: 302
06/24 08:32:18.073 [https-jsse-nio-8443-exec-7] DEBUG pdmweb 544 headerString: Location: /CAisd/pdmweb.exe
06/24 08:32:18.073 [https-jsse-nio-8443-exec-7] DEBUG pdmweb 376 Started processing the cookies from the request..[Ljavax.servlet.http.Cookie;@6cf147ec
06/24 08:32:18.073 [https-jsse-nio-8443-exec-7] DEBUG pdmweb 389 Cookie string processed is : JSESSIONID=<SESSION_ID>;
06/24 08:32:18.074 [https-jsse-nio-8443-exec-7] DEBUG pdmweb 396 Cookie processing done !
Environment
Service Desk Manager 17.4 RU1
SAML Authentication
Siteminder IDP
Cause
Siteminder is misconfigured
Resolution
In Siteminder, configure the following under Assertion Attributes:
Assertion Attributes - name
Namespace - http://schemas.xmlsoap.org/ws/2005/05/identity/claims/
Type - User Attribute
Value - CN
DN Spec - <blank>
Also verify this step per the SAML Documentation:
Section 3:-For CA Siteminder: If you want to use CA Single Sign-On (formerly known as CA Siteminder), as your Identify Provider, do the following:
e. The value of the Namespace field must be the URI for the respective Claim. If the value is specified as "Unspecified" the SAML authentication will not work.
Additional Information
Feedback
