Webagent " OverlookSessionForUrls " ACO Parameter and wildcards usage.

Products

• CA Single Sign On Secure Proxy Server (SiteMinder)
• CA Single Sign On SOA Security Manager (SiteMinder)
• CA Single Sign-On
• CA Single Sign On Agents (SiteMinder)
• SITEMINDER

Issue/Introduction

In the Webagent guide, there is a description of the Agent Configuration Object (ACO) OverlookSessionForUrls.

Are wildcards accepted?

 

Environment

Component: SMAPC or SMIIS
Release: Applicable to all the supported releases.

Resolution

- A multi-value parameter is accepted but this parameter does not accept wildcard. A complete URL should be defined.

- Document reference:

https://techdocs.broadcom.com/us/en/symantec-security-software/identity-security/siteminder/12-8/configuring/web-agent-configuration/session-protection/session-cookie-management.html

- OverlookSessionForUrls:

Specifies a list of URLs against which the Web Agent compares the URLs from all HTTP requests. If a match occurs, the Web Agent does not create or update an SMSESSION cookie. 

Also, cookie providers (if configured) are not updated for that request.

Default: No default

Example: Use a relative URL, such as /MyDocuments/index.html. Do not use an absolute URL, such as http://fqdn.host/MyDocuments/index.html.

Note: If you configure the OverlookSessionForMethods and OverlookSessionForUrls parameters, the methods are processed before the URLs.