Description of EnforcePolicies parameter.

Products

• CA Single Sign On Secure Proxy Server (SiteMinder)
• CA Single Sign On SOA Security Manager (SiteMinder)
• CA Single Sign-On

Issue/Introduction

Description

What is EnforcePolicies parameter doing? It's not described in r12 or 6.x documentation at all.

Solution

For a Web Agent to perform access control, it must check with the Policy Server to see if resources are protected and challenge the user for authentication credentials.

To enforce access control, set the EnforcePolicies to yes (the default setting) if the Web Agent is protecting resources and acting as a credential collector.

To disable the enforcement of policies, set the EnforcePolicies to no. The Web Agent can still establish a connection to the Policy Server, but it can only collect management information; it does not restrict access to resources on the Web server.

EnforcePolicies is only valid for Non-Framework (Traditional) agents.

Environment

Release:
Component: SMPLC