Configuring the CA SiteMinder Federation Security Services (SMFSS) Assertion Generator Plug-in (AGP) for Microsoft SharePoint 2010

Products

• CA Single Sign On Secure Proxy Server (SiteMinder)
• CA Single Sign On SOA Security Manager (SiteMinder)
• CA Single Sign-On

Issue/Introduction

SiteMinder Federation Security Services generates multi-valued SAML claims in a format not understood by Microsoft SharePoint 2010.

Environment

CA SiteMinder Federation Security Services (SMFSS) 12.0.2.x and 12.0.3.0 using the referenced Assertion Generator Plug-in (AGP).This AGP is not required for SiteMinder FSS 12.0.3.1 or higher and is not supported with Federation Manager Standalone.

Cause

By design in this release.

Resolution

This KB provides a way to use multi-valued SAML claims with Microsoft SharePoint 2010 and CA SiteMinder Federation Security Services (SMFSS) 12.0.2.x and 12.0.3.0 using the referenced Assertion Generator Plug-in (AGP). This AGP is not required for SiteMinder FSS 12.0.3.1 or higher and is not supported with Federation Manager Standalone.

For complete instructions about how to configure Federation between SiteMinder and SharePoint 2010 refer to the paper Configuring Identity Federation between CA SiteMinder and Microsoft SharePoint 2010, which can be found on the Microsoft Interop Vendor Alliance website http://interopvendoralliance.org/Labs.aspx.

For the document "SMFSS SharePoint 2010 AGP Sample Configuration", click here.

 

Additional Information

For the sample AGP, click here.