IgnoreURL parameter at Agent Configuration Object (ACO)

Products

• CA Single Sign On Secure Proxy Server (SiteMinder)
• AXIOMATICS POLICY SERVER
• CA Single Sign On SOA Security Manager (SiteMinder)
• CA Single Sign-On

Issue/Introduction

Description

Customer has set ignoreurl parameter in ACO but it didn't works as expected.

Example:

ignoreurl='https://support.ca.com/connection/weblink?pageab=AA_CHANGEPWD'

The expectation is ignoreURL will match the whole URI starting from "/connection/weblink?pageab=AA_CHANGEPWD".

It means if customer access https://support.ca.com/connection/weblink.htm , it should get challenge and ignoreURL shouldn't match.

However, the IgnoreUrl paramater resulted in anything /connection/weblink* being ignored.

Solution

IgnoreURL is working as design.

for example, "https://support.ca.com/connection/weblink?pageab=AA_CHANGEPWD" is a [scheme][hostname.domainname][resource/relative_uri][querystring].

The IgnoreUrl should applies to the resource/relative_uri and does not include the query string (in this case will be "?pageab=AA_CHANGEPWD") , which means only the /connection/weblink will be evaluated.

Environment

Release:
Component: SMAPC