IgnoreURL parameter at Agent Configuration Object (ACO)

Article Id: 52897

Status: Published

Updated On: 14-02-2018 06:43

Legacy Id: TEC489044

Products:

CA Single Sign On Secure Proxy Server (SiteMinder) , AXIOMATICS POLICY SERVER , CA Single Sign On SOA Security Manager (SiteMinder) , CA Single Sign-On , CA Single Sign-On

Issue/Introduction:

Description

Customer has set ignoreurl parameter in ACO but it didn't works as expected.

Example:

ignoreurl='https://support.ca.com/connection/weblink?pageab=AA_CHANGEPWD'

The expectation is ignoreURL will match the whole URI starting from "/connection/weblink?pageab=AA_CHANGEPWD".

It means if customer access https://support.ca.com/connection/weblink.htm , it should get challenge and ignoreURL shouldn't match.

However, the IgnoreUrl paramater resulted in anything /connection/weblink* being ignored.

Solution

IgnoreURL is working as design.

for example, "https://support.ca.com/connection/weblink?pageab=AA_CHANGEPWD" is a [scheme][hostname.domainname][resource/relative_uri][querystring].

The IgnoreUrl should applies to the resource/relative_uri and does not include the query string (in this case will be "?pageab=AA_CHANGEPWD") , which means only the /connection/weblink will be evaluated.

Environment:

Release:
Component: SMAPC