Configuring the CA SiteMinder Federation Security Services (SMFSS) Assertion Generator Plug-in (AGP) for Microsoft SharePoint 2010

book

Article ID: 3950

calendar_today

Updated On:

Products

CA Single Sign On Secure Proxy Server (SiteMinder) AXIOMATICS POLICY SERVER CA Single Sign On SOA Security Manager (SiteMinder) CA Single Sign-On

Issue/Introduction

SiteMinder Federation Security Services generates multi-valued SAML claims in a format not understood by Microsoft SharePoint 2010.

Cause

By design in this release.

Environment

CA SiteMinder Federation Security Services (SMFSS) 12.0.2.x and 12.0.3.0 using the referenced Assertion Generator Plug-in (AGP).This AGP is not required for SiteMinder FSS 12.0.3.1 or higher and is not supported with Federation Manager Standalone.

Resolution

This KB provides a way to use multi-valued SAML claims with Microsoft SharePoint 2010 and CA SiteMinder Federation Security Services (SMFSS) 12.0.2.x and 12.0.3.0 using the referenced Assertion Generator Plug-in (AGP). This AGP is not required for SiteMinder FSS 12.0.3.1 or higher and is not supported with Federation Manager Standalone.

For complete instructions about how to configure Federation between SiteMinder and SharePoint 2010 refer to the paper Configuring Identity Federation between CA SiteMinder and Microsoft SharePoint 2010, which can be found on the Microsoft Interop Vendor Alliance website http://interopvendoralliance.org/Labs.aspx.

For the document "SMFSS SharePoint 2010 AGP Sample Configuration", click here.

 

Additional Information

For the sample AGP, click here.

Attachments

1558533779156TEC546523.zip get_app