IgnoreURL ACO parameter

Products

• CA Single Sign On Secure Proxy Server (SiteMinder)
• CA Single Sign On SOA Security Manager (SiteMinder)
• CA Single Sign-On

Issue/Introduction

Description:

Customer has set ignoreurl parameter in ACO but it didn't works as customer expected.

Example:
ignoreurl='https://support.ca.com/connection/weblink?pageab=AA_CHANGEPWD'

What customer expect is ignoreURL will match the whole URI starting from "/connection/weblink?pageab=AA_CHANGEPWD".

It means if customer access https://support.ca.com/connection/weblink.htm, it should get challenge and ignoreURL shouldn't match.

However, the IgnoreUrl paramater resulted in anything /connection/weblink* being ignored.

Solution:

What customer has experienced is by design.

For example, "https://support.ca.com/connection/weblink?pageab=AA_CHANGEPWD" is a [scheme][hostname.domainname][resource/relative_uri][querystring].

The IgnoreUrl applies to the resource/relative_url and does not include the query string, which means only the /connection/weblink will be evaluated.

Sample:

<WebAgent.log>
ignoreurl='http://www.abc.com/html/html2/index.asp?123'.

<WebAgentTrace.log>
[Resolved URL: '/html/html2/index.asp'.]
[Auto-authorizing resource, matches IgnoreUrl filter.]

Environment

Release:
Component: SMAPC