Cookie path setting for Federation Services in SPS

Products

• SITEMINDER
• CA Single Sign On Federation (SiteMinder)
• CA Single Sign On Secure Proxy Server (SiteMinder)

Issue/Introduction

Running CA Access Gateway (SPS), when the SPS consumes the SAML response at the URL

  /affwebservices/public/saml2assertionconsumer

the SPS generates also a cookie with the root path "/".

How to set the cookie path to something else that root, like /<path>, for the SPS Federation Service?

 

Resolution

The SPS Federation services doesn't handle so much ACO parameters (1).

Set an Enhancement Request (Idea) (2), for the SPS Federation Services to handle ACO parameter such as:

• CookiePath
• MasterCookiePath

More, work around that limitation by setting an output filter in CA Access Gateway (SPS) (3).

 

Additional Information

 

1. Full ACO list for Web Agent Option Pack
   
   
2. Creating an Idea/Enhancement Request for SiteMinder
   
   
3. Filter API Overview