How to disable the Advanced Auth (Arcot) services from the Secure Proxy Server?

Products

• CA Single Sign On Secure Proxy Server (SiteMinder)
• CA Single Sign On SOA Security Manager (SiteMinder)
• CA Single Sign-On

Issue/Introduction

Secure Proxy Server R12.52 and above has an additional feature to integrate with CA Advanced Authentication to enable Enhanced Session Assurance.

This feature prevents session hijacking and replay. Customers have the option of enabling or disabling it based on the environment needs.

By default, the feature will be enabled. But it can be disabled from the server.conf file in the Secure Proxy Server.

 

 

Resolution

To disable the Advanced Auth (Arcot) Services on your SPS box change "enable=yes" to "enable=no" and restart the SPS for the following 3 entries in the server.conf:

<Context name="AALoginService">

docBase="aaloginservice"

path="aaloginservice"

enable="no"

</Context>

<Context name="Advanced Auth Application">

docBase="authapp"

path="authapp"

enable="no"

</Context>

<Context name="UI Application">

docBase="uiapp"

path="uiapp"

enable="no"

</Context>