Impersonation :: How to get the SM_USERIMPERSONATORNAME header.

Products

• CA Single Sign On Secure Proxy Server (SiteMinder)
• CA Single Sign On SOA Security Manager (SiteMinder)
• CA Single Sign-On

Issue/Introduction

Description:

I just configured my environment to do impersonation. It works. Now for the application needs, I would like to get the header:

SM_USERIMPERSONATORNAME

From the Policy Server Design Guide, 

The following list contains user attributes that SiteMinder generates automatically.

When I list the header variables, The header is not present, even if it is told that SiteMinder generates it automatically.

How can we get it?

 

Environment

Release: 
Component: SMIIS

Resolution

Solution:
You have to create a response to get those automatic generated headers. To get the header: SM_USERIMPERSONATORNAME
 
You need to create a response for the user attribute, with:

variable  SM_USERIMPERSONATORNAME
attribute   SM_USERIMPERSONATORNAME
 
Bind that response to the Impersonation Start User event. Then you will be able to get the value and pass it to your backend application.

Additional Information

https://techdocs.broadcom.com/us/en/symantec-security-software/identity-security/siteminder/12-8/configuring/policy-server-configuration/impersonation.html