Full ACO list for Web Agent Option Pack

Products

• CA Single Sign On Secure Proxy Server (SiteMinder)
• CA Single Sign-On
• CA Single Sign On Agents (SiteMinder)
• CA Single Sign On Federation (SiteMinder)
• SITEMINDER

Issue/Introduction

When starting a new installed Web Agent Option Pack, the following ACO parameters are set:

  Default agent name
  Transient ID Cookies
  Accept Third Party Cookies
  Transient IP Check
  Cookie domain
  Cookie domain scope
  FWSMaxProviderCacheSize not specified.
  SSOZoneName not specified.
  SSOTrustedZone
  FedDeploymentMode
  FedSmConnectorEnabled
  FedSMCCreatedByUI
  FedSmConnectorRealmFilter
  Secure Cookies
  ValidFedTargetDomain
  
What's the list of the full ACO parameter that are available for the Web Agent Option Pack, their description and default value?

 

Environment

 

Web Agent Option Pack 12.52SP1CR10 on Tomcat 9 on RedHat 6;

 

Resolution

The full list of the ACO parameters for the Web Agent Option Pack is:

  AcceptTPCookie
  CookieDomain
  CookieDomainScope
  DefaultAgentName
  FedDeploymentMode
  FedSMCCreatedByUI
  FedSmConnectorEnabled
  FedSmConnectorRealmFilter
  FWSMaxProviderCacheSize
  SSOZoneName
  SSOTrustedZone
  TransientIDCookies
  TransientIPCheck
  UseHTTPOnlyCookies
  UseSecureCookies
  ValidFedTargetDomain

Pay attention to this. The following ACO parameters can be modified by the AdminUI operator:

  AcceptTPCookie
  CookieDomain
  CookieDomainScope
  DefaultAgentName
  SSOZoneName
  SSOTrustedZone
  TransientIDCookies
  TransientIPCheck
  UseHTTPOnlyCookies
  UseSecureCookies

Details will be found in the documentation (1).

However, there are few Parameters which can not be seen from ACO, but the Web Agent Option Pack will make use for other purposes.

They are listed here:

 FedDeploymentMode =       
 // Will be used to know the Type of Deployment in case of 
 // Federation Manager, will not be used in standard Federation.

 FedSMCCreatedByUI =       
 // Determines the correct value for the string for loading a 
 // SiteMinderConnector, either "YES" or "NO".

 FedSmConnectorEnabled =       
 // Will be used in Federation Manager. 

 FedSmConnectorRealmFilter =       
 // This is being used in the Context of SmConnector for Federation 
 // Manager.

 FWSMaxProviderCacheSize =       
 // If FWSMaxProviderCacheSize value not found from ACO it is being 
 // set to default value of 700 as Cache size, otherwise configured
 // value is considered, but no where this value is being referred
 // further.

 ValidFedTargetDomain =       
 // Will be used in SM Connector Deployment, also in IPD (Identity 
 // provider Discovery) Discovery Profile.

 

Additional Information

 

1. List of Agent Configuration Parameters